Quantum-Safe Readiness & Planning Survey

We are conducting this survey to better understand how European companies are approaching quantum-safe cryptography, compliance with upcoming EU regulations, and the risks associated with quantum computing.

The survey should take less than 10 minutes to complete.

Company Profile

Number of employees

1–10

11-49

51–200

201–500

501+

Industry

Finance / Banking

Healthcare / Pharma

Technology / IT / Software

Manufacturing / Industrial / OT

Telecommunications / Utilities / Critical Infrastructure

Public Sector / Government / Administration

Other

Geographical scope / Regions of operation

EU only

EU + non‑EU

Regulatory / compliance frameworks relevant for your business (select all that apply)

NIS2 Directive (or local implementation)

Cyber Resilience Act (if you produce or operate digital products/services)

Sector-specific regulation for financial services / banking / payments

Data protection / privacy regulation (e.g. GDPR)

Regulation/standards relevant for critical infrastructure / OT / industrial control systems

Other

Does your organization consider cryptographic security (encryption, digital signatures, integrity, confidentiality) as a strategic compliance / risk area?

Yes - integral to compliance and risk management

Yes - to some extent

Not yet

Awareness of Quantum Threats & Regulatory Context

How familiar are you with quantum computing and its potential impact on cryptography?

Not aware

Very well aware

Have you heard of "harvest now, decrypt later" (HNDL / "store-now, decrypt-later") risks associated with quantum computing?

No / never heard of it

Heard, but uncertain about relevance

Aware and somewhat concerned

Fully aware and actively evaluating its impact on your data/security strategy

Do you know that the European Commission published a coordinated transition roadmap toward post-quantum cryptography (PQC) for EU member states, with suggested timelines for adoption?

Yes

Does your organization consider this roadmap (or EU regulatory requirements) when planning cryptographic compliance / migration?

Yes — actively aligning

Considering, but no concrete steps yet

Not considering / not relevant to us

Do you think your business (or industry) will face regulatory or compliance pressure to adopt quantum‑safe cryptography (e.g. under NIS2, CRA, or sector-specific rules)?

Yes — high chance

Possibly — moderate

Unlikely / no expectation

Don't know

Internal Capabilities & Governance

Have you allocated or planned internal resources (people, budget) toward quantum‑safe cryptography / readiness?

Yes — already allocated

Planning to allocate in the next 12 months

No current plans

Don't know

Does your organisation have (or plan to hire) one or more personnel explicitly responsible for quantum‑safe / post-quantum cryptography migration?

Yes — already assigned

Plan to assign / hire soon

No plans

Don't know

Have you invested (or plan to invest) in internal training, upskilling or awareness building around quantum risks / quantum‑safe cryptography?

Yes — training ongoing or planned

Considered, but no concrete steps yet

Don't know

Do you have (or plan to publish) internal guidelines / policies around quantum‑safe software / application development (e.g., secure-by-default PQC use, crypto-agility, crypto inventory)?

Yes — already exist

Planning to create soon

Not considered

Don't know

Cryptographic Inventory & IT Asset Landscape

Does your organization maintain a current cryptographic inventory / crypto‑asset register (key stores, certificates, encrypted storage, secure communications, etc.)?

Yes — regularly updated

Yes — partially

No, but planning to start

What types of IT assets / systems do you currently use — or plan to include in a cryptographic discovery / inventory / scanning? (select all that apply)

Web servers / TLS-based services (HTTPS, APIs)

VPN / secure communication infrastructure

PKI / digital certificates / code-signing

Data storage systems / databases with encrypted content

Cloud infrastructure / cloud-hosted services

On-premise servers / legacy systems

Operational Technology (OT) / Industrial Control Systems (ICS) / SCADA / PLC systems

IoT / embedded devices / edge systems

Mobile applications / mobile device management (MDM)

Software development pipelines / CI-CD / build artifacts

Other

Have you (or plan to) perform a cryptography‑discovery / scanning exercise to map all crypto usage in your organisation (including legacy, obscure systems, embedded/OT)?

Yes — already done / in progress

Planning to start soon

Not planned

Don't know

Quantum‑Safe Planning & Migration Strategy

Have you started a quantum‑safe migration plan?

Yes — fully underway (PQC / hybrid crypto adoption)

Yes — initial planning / roadmap defined

Evaluating / assessing feasibility

No plans

If yes (or planning): which areas are you prioritising for PQC / quantum‑safe migration? (select all that apply)

TLS / HTTPS / Web services

VPN / secure comms

PKI / digital signatures / certificate management

Data at rest (databases, encrypted storage)

Cloud / hybrid-cloud services

IoT / embedded / edge / OT devices / systems

Software development / code signing / secure build artifacts

Other

What motivates your interest in quantum‑safe cryptography? (rank top 3)

Regulatory / compliance pressure or future-proofing

Protecting sensitive data from future "store-now, decrypt-later" risks

Risk of reputational damage / customer trust

Cyber-resilience / long-term security posture

Competitive advantage / innovation leadership

Other

Please select a maximum of 3 options.

What are the biggest obstacles you foresee in implementing quantum‑safe cryptography? (select all that apply)

Lack of internal knowledge / expertise

Budget / resource constraints

Complexity of migration (legacy systems, hybrid, compatibility)

Uncertainty about standards / algorithm selection

Performance / scalability concerns

Vendor / solution immaturity

Integration with OT / embedded / legacy systems

Regulatory / compliance uncertainty

Other

Do you consider a hybrid-crypto deployment (classical + PQC) as a viable transitional strategy?

Yes

Maybe / unsure

What is your desired or planned timeline (horizon) for achieving quantum-safe readiness / migration across critical assets?

What support or services would you most value from an external quantum-safe consultancy (e.g., audit, inventory & discovery, roadmap planning, hybrid implementation, training, policy creation, automatic remediation)?

Receive our report on quantum safe regulatory landscape in the EU

Email address

Company Name

Would you be interested in scheduling a demo or consultation on automated quantum safe compliance check or other services? We will get back to you or you can contact us at contact@qcomply.tech.

Yes