G7 financial-sector roadmap sets 2030 to 2032 target for critical systems
12 JANUARY 2026, WASHINGTON
The G7 Cyber Expert Group published "Advancing a Coordinated Roadmap for the Transition to Post-Quantum Cryptography in the Financial Sector" in January 2026, and the PDF sits on the US Treasury's website. The group says it developed the roadmap to encourage a coordinated approach to migrating the financial sector to quantum-resistant cryptography.
The document sets out six phases or activities: awareness and preparation, discovery and inventory, risk assessment and planning, migration execution, migration testing, and validation and monitoring. The target for migrating critical systems is 2030 to 2032, with 2035 as the overall date for the sector.
The roadmap says it is not intended to be prescriptive, in the document's words, and lets organizations adapt timelines to risk profile and system complexity. It is therefore voluntary guidance, not a binding rule.
Financial authorities and entities of all sizes, third-party service providers and vendors, infrastructure operators, national cyber agencies and standards bodies are affected. The roadmap promotes risk-based prioritization, interoperability and international collaboration.
Why it matters. Banks and fintechs now have a shared sector reference for sequencing work and for talking to supervisors, with 2030 to 2032 for critical systems and 2035 for the sector. Although the roadmap is not prescriptive, organizations should expect supervisors and counterparties to use it as a benchmark. Third-party providers should expect their financial clients to ask about their migration plans.