Malaysia launches a national post-quantum migration plan and sandbox
9 JULY 2026, PUTRAJAYA
Malaysia launched a national post-quantum migration plan and a sandbox on 9 July 2026, building on work from November 2025. The plan sets national direction for the transition, while the sandbox gives organizations a space to test post-quantum approaches. The plan does not attach dated deadlines, so it emphasises capability and support over compulsion.
The sandbox is the practical centrepiece. It gives organizations a controlled environment to test post-quantum cryptography before deploying it in production, which surfaces integration and performance issues early. Finding those issues in a sandbox rather than in live systems lowers the risk and cost of migration when organizations move real workloads.
By pairing a plan with a sandbox and holding off on deadlines, Malaysia takes a capability-first approach. It builds the national direction and the testing ground that organizations need, letting them gain experience before any firm timeline arrives. That sequencing suits an early-stage national program that wants adoption grounded in practical readiness.
Why it matters. Malaysia's plan and sandbox give organizations both direction and a safe place to experiment, without the pressure of a dated deadline yet. The sandbox is the most useful element for practitioners, since testing post-quantum cryptography before production reduces migration risk. Organizations can use it to build hands-on experience now, so they are ready if Malaysia later attaches deadlines to the national plan.