[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Fcisa-post-quantum-considerations-operational-technology":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":55,"image":57,"industries":58,"keyFindings":8,"meta":62,"modified":63,"navigation":64,"path":65,"pullquote":8,"recommendations":8,"references":66,"related":73,"seo":80,"seoTitle":81,"signposts":8,"slug":82,"stats":8,"stem":83,"tags":84,"tldr":89,"__hash__":90},"news\u002Fnews\u002Fcisa-post-quantum-considerations-operational-technology.md","CISA Warns That Industrial Systems Face Special Obstacles in Post-Quantum Migration","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"cisa-warns-that-industrial-systems-face-special-obstacles-in-post-quantum-migration","CISA warns that industrial systems face special obstacles in post-quantum migration",[18,19,20],"p",{},[21,22,23],"strong",{},"OCTOBER 2024, ARLINGTON",[18,25,26],{},"CISA published \"Post-Quantum Considerations for Operational Technology\" in late October 2024. The CISA page itself carries no date; Industrial Cyber reports it on 29 October 2024. Operational technology (OT) means the systems that run physical processes such as power grids and factory lines.",[18,28,29],{},"The paper warns that OT faces particular obstacles in moving to post-quantum cryptography. According to Industrial Cyber, these include legacy equipment with decades-long lifespans, long patching cycles and strict safety testing, widespread use of end-of-life operating systems, and hardware that is hard to replace in live operations. Industrial Cyber reports these recommendations: segment OT networks to limit attacker access, build crypto agility (the ability to change algorithms without replacing infrastructure) into new platforms, protect remote access points first, layer classical and post-quantum protections, begin inventory and planning now, adopt zero trust architecture, and pilot post-quantum and hybrid approaches. Organizations should write their own transition roadmaps and use the NIST algorithms released in 2024. Owners and operators of industrial control systems and SCADA in energy, utilities, manufacturing, transportation and healthcare are affected, along with OT vendors and manufacturers.",[18,31,32],{},"Industrial Cyber quotes two practitioners with sharply different views. Tom Marsland of Cloud Range said the quantum threat to existing cryptography is real. John Terrill, chief information security officer at Phosphorus, called the paper \"just a shiny new distraction,\" arguing that OT teams have more immediate problems. CISA's January 2026 product-category list explicitly leaves OT and IoT devices outside its current scope, according to Infosecurity Magazine.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," Equipment with decades-long lifespans bought today may still be in service when quantum risk becomes real, so purchasing decisions now carry long-term exposure. The guidance is advisory, and practitioners disagree on urgency. Operators should expect OT to lag IT, which suggests building crypto agility requirements into new equipment purchases.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2024-10-29","CISA's October 2024 paper says industrial systems face legacy gear and long patch cycles in post-quantum migration. Operators should plan crypto agility.",false,"md",[49,52],{"q":50,"a":51},"Is the CISA OT guidance mandatory?","No. The guidance is advisory, and practitioners disagree on urgency: one called the quantum threat real, while another called the paper a distraction given more immediate OT problems.",{"q":53,"a":54},"What does CISA recommend for OT operators?","Per Industrial Cyber: segment OT networks, build crypto agility into new platforms, protect remote access first, layer classical and post-quantum protections, start inventory now, adopt zero trust and pilot hybrid approaches.",[56],"arlington","\u002Fassets\u002Fog-default.png",[59,60,61],"Cross-Sector","Energy","Critical Manufacturing",{},"2026-08-27",true,"\u002Fnews\u002Fcisa-post-quantum-considerations-operational-technology",[67,70],{"label":68,"url":69},"Industrial Cyber, \"DHS and CISA prescribe proactive steps toward post-quantum cryptography across OT environments,\" Oct. 29, 2024.","https:\u002F\u002Findustrialcyber.co\u002Fcisa\u002Fdhs-and-cisa-prescribe-proactive-steps-toward-post-quantum-cryptography-across-ot-environments\u002F",{"label":71,"url":72},"Infosecurity Magazine, \"CISA Releases List of Post-Quantum Cryptography Product Categories,\" Jan. 26, 2026.","https:\u002F\u002Fwww.infosecurity-magazine.com\u002Fnews\u002Fcisa-post-quantum-cryptography\u002F",[74,77],{"label":75,"url":76},"CISA, NSA and NIST Quantum-Readiness Factsheet","\u002Fnews\u002Fcisa-nsa-nist-quantum-readiness-factsheet",{"label":78,"url":79},"Grid Faces Decade-Long OT Migration","\u002Fnews\u002Fenergy-grid-ot-post-quantum-2030",{"title":5,"description":45},"CISA Warns of Post-Quantum Obstacles in OT Systems","cisa-post-quantum-considerations-operational-technology","news\u002Fcisa-post-quantum-considerations-operational-technology",[85,86,87,88],"operational technology","critical infrastructure","crypto-agility","post-quantum cryptography","CISA's October 2024 paper says industrial systems face legacy gear and long patch cycles in post-quantum migration, so operators should plan crypto agility.","JQPdCeURjkwnNfkzpfn9PpVzDln14sCK7ER1nSbFfdk",1792182887021]