Swiss FINMA finds banks and insurers lack post-quantum roadmaps
9 JULY 2026, BERN
The Swiss Financial Market Supervisory Authority, FINMA, published Guidance 05/2026 on 9 July 2026. The guidance reports a survey of 60 institutions and finds that banks and insurers largely lack post-quantum roadmaps. The result shows the Swiss financial sector sits early in its preparation, even as supervisory attention to quantum risk grows across jurisdictions.
FINMA pairs the finding with a clear recommendation: institutions should build a post-quantum roadmap by mid-2027. That target turns the survey's gap into a corrective step with a date attached. It gives supervised firms a concrete near-term objective, producing a plan, before any question of migrating systems.
The guidance frames post-quantum readiness as part of the risk management FINMA supervises. Because of that framing, supervised banks and insurers should expect FINMA to ask about their roadmap progress against the mid-2027 recommendation. A firm without a roadmap has a visible gap that a supervisor can raise directly.
Why it matters. FINMA has measured the problem and set a response: most supervised firms lack a roadmap, and they should build one by mid-2027. For Swiss banks and insurers, that recommendation is the near-term expectation to meet. Firms that start cryptographic discovery now will be able to produce a credible roadmap by the target date, rather than scrambling to answer when their supervisor asks.