Colombia's financial supervisor flags quantum among emerging risks
30 SEPTEMBER 2025, BOGOTA
Colombia's financial supervisor flagged quantum among emerging risks on 30 September 2025, against a backdrop of rising cyberattacks. It identified quantum as a risk to watch rather than imposing a specific requirement on financial firms. The move puts quantum on the sector's radar through supervisory attention rather than a mandate.
The context of rising attacks sharpens the message. The supervisor cited a large volume of cyberattacks, reported as 27 billion between January and July 2025, an increase of about 69 percent. That surge frames quantum as one emerging threat among many pressing on an already stressed cyber environment, which helps explain why the supervisor named it now.
Flagging a risk is a signal, not an obligation. By listing quantum among emerging risks, the supervisor raises awareness and indicates it is paying attention, without yet setting requirements. Firms should read the flag as an early indicator that quantum sits within the supervisor's view, which in regulatory practice often precedes firmer expectations.
Why it matters. Colombia's supervisor has named quantum as an emerging risk amid a sharp rise in cyberattacks, signalling attention without a mandate. For Colombian financial firms, the flag is an early warning that quantum is on the supervisor's agenda. Firms can respond by building awareness and starting foundational work like cryptographic inventory, so they are positioned if the supervisor moves from flagging the risk to acting on it.