Quantum computing, while carrying the potential to transform industries, also introduces the “quantum threat”: the expectation that when sufficiently powerful quantum computers arrive, they will be misused by threat actors to break the existing cryptography supporting today’s digital infrastructure. This raises the need for organisations to transit to quantum-safe solutions to address this risk to their cryptographic assets and systems – a process known as quantum-safe migration.
To support organisations in their preparation, the Cyber Security Agency of Singapore (“CSA“) has released a Quantum-Safe Handbook (“Handbook“) and Quantum Readiness Index (“QRI“). The Handbook and the QRI are under public consultation from 23 October to 31 December 2025.
Handbook
The Handbook provides guidance for organisations, in particular Critical Information Infrastructure owners and government agencies, in preparing for the quantum-safe transition. It highlights key areas of focus and sets out practical considerations and resources for organisations to begin building readiness.
The Handbook addresses five key domains for quantum-safe migration:
- Risk assessments: Identify and prioritise your key assets.
- Governance: Establish a coordinated and sustainable plan across your organisation.
- Technology: Guide the implementation steps and considerations to execute migration.
- Training & Capability: Develop the knowledge and competencies needed for migration.
- External Engagements: Work with vendors and ecosystem partners to drive migration.
QRI
The QRI is a self-assessment questionnaire that complements the Handbook. It helps system owners and security practitioners gauge their organisation’s state of readiness, prioritise key actions, and facilitate informed discussions with senior management.
The QRI has been designed using the constructs of domains (organisational aspect to address the quantum-enabled threat), objectives, levels (readiness of organisations for each objective) and recommendations. Organisations answer a series of questions aligned with objectives under the domains, after which the readiness level for each objective and recommendations on the next steps are shown. Organisations can subsequently develop action plans based on suggested recommendations by referring to guidance in the Handbook and implementing these plans.
Click on the following link for more information:
- Public Consultation – Quantum-Safe Handbook and Quantum Readiness Index (available on the CSA website at csa.gov.sg)
Disclaimer
Rajah & Tann Asia is a network of member firms with local legal practices in Cambodia, Indonesia, Lao PDR, Malaysia, Myanmar, the Philippines, Singapore, Thailand and Vietnam. Our Asian network also includes our regional office in China as well as regional desks focused on Brunei, Japan and South Asia. Member firms are independently constituted and regulated in accordance with relevant local requirements.
The contents of this publication are owned by Rajah & Tann Asia together with each of its member firms and are subject to all relevant protection (including but not limited to copyright protection) under the laws of each of the countries where the member firm operates and, through international treaties, other countries. No part of this publication may be reproduced, licensed, sold, published, transmitted, modified, adapted, publicly displayed, broadcast (including storage in any medium by electronic means whether or not transiently for any purpose save as permitted herein) without the prior written permission of Rajah & Tann Asia or its respective member firms.
Please note also that whilst the information in this publication is correct to the best of our knowledge and belief at the time of writing, it is only intended to provide a general guide to the subject matter and should not be treated as legal advice or a substitute for specific professional advice for any particular course of action as such information may not suit your specific business and operational requirements. You should seek legal advice for your specific situation. In addition, the information in this publication does not create any relationship, whether legally binding or otherwise. Rajah & Tann Asia and its member firms do not accept, and fully disclaim, responsibility for any loss or damage which may result from accessing or relying on the information in this publication.
