[{"data":1,"prerenderedAt":90},["ShallowReactive",2],{"news-\u002Fnews\u002Fuk-ncsc-2028-2031-2035-deadlines":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":45,"__hash__":89},"news\u002Fnews\u002Fuk-ncsc-2028-2031-2035-deadlines.md","UK NCSC Sets 2028, 2031 and 2035 Post-Quantum Migration Deadlines","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"uk-ncsc-sets-2028-2031-and-2035-migration-deadlines","UK NCSC sets 2028, 2031 and 2035 migration deadlines",[18,19,20],"p",{},[21,22,23],"strong",{},"20 MARCH 2025, LONDON",[18,25,26],{},"The UK's National Cyber Security Centre set three post-quantum deadlines on 20 March 2025. Organizations should complete discovery and planning by 2028, begin early migration by 2031, and finish migration by 2035. The staged sequence tells organizations to understand their estate first, migrate the priority systems next, and complete the work within a decade.",[18,28,29],{},"Putting discovery first reflects how the NCSC sees the problem. An organization cannot migrate cryptography it has not located, so the 2028 milestone focuses on finding where cryptography is used and building a plan. The heavier migration work in 2031 and 2035 then rests on that picture rather than starting blind.",[18,31,32],{},"The NCSC issues guidance rather than binding regulation, so the timeline sets a strong national expectation rather than a universal legal mandate. Regulated sectors may face firmer requirements derived from it, and organizations across the United Kingdom can treat the dates as a planning baseline that aligns with the 2035 horizon used in several other jurisdictions.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," The NCSC timeline gives UK organizations a clear, staged schedule anchored on a 2028 discovery milestone. Because migration depends on knowing where cryptography lives, the 2028 date is the one that most affects whether the later deadlines are achievable. Organizations that start discovery now have the time to plan an orderly migration; those that wait compress all three stages into a shorter window.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2025-03-20","The UK NCSC set three post-quantum deadlines in March 2025: discovery and planning by 2028, early migration by 2031 and complete migration by 2035.",false,"md",[49,52,55],{"q":50,"a":51},"What are the NCSC's three deadlines?","The NCSC set discovery and planning by 2028, early migration by 2031, and complete migration by 2035. The staged dates give organizations a defined sequence: understand your estate first, migrate the priority systems next, and finish within a decade.",{"q":53,"a":54},"Are the NCSC deadlines mandatory?","The NCSC issues guidance rather than binding regulation, so the timeline sets a strong national expectation rather than a legal mandate for every organization. Regulated sectors may face firmer requirements derived from it, so organizations should treat the dates as a planning baseline.",{"q":56,"a":57},"What should organizations do by 2028?","By 2028 the NCSC expects organizations to complete discovery and build a migration plan. That means finding where cryptography is used across the estate and deciding the order and method of migration, so the heavier work in 2031 and 2035 rests on a clear picture.",[59],"london","\u002Fassets\u002Fog-default.png",[62,63],"Cross-Sector","Government Facilities",{},"2026-09-03",true,"\u002Fnews\u002Fuk-ncsc-2028-2031-2035-deadlines",[69],{"label":70,"url":71},"National Cyber Security Centre (NCSC), \"Timelines for migration to post-quantum cryptography,\" Mar. 20, 2025.","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fpqc-migration-timelines",[73,76],{"label":74,"url":75},"UK NCSC Endorses ML-KEM-768 and ML-DSA-65, Hybrid as Interim Only","\u002Fnews\u002Fuk-ncsc-endorses-ml-kem-768-ml-dsa-65",{"label":77,"url":78},"US Executive Order 14412 Post-Quantum Deadline","\u002Fnews\u002Fus-executive-order-14412-post-quantum-deadline",{"title":5,"description":45},"UK NCSC Sets 2028, 2031 and 2035 PQC Deadlines","uk-ncsc-2028-2031-2035-deadlines","news\u002Fuk-ncsc-2028-2031-2035-deadlines",[84,85,86,87,88],"NCSC PQC timelines","PQC migration","2035 deadline","cryptographic discovery","for enterprises","luIpLwzMbz5V_n9P-tWvIHpcay-F9pDn1grohtj_mBs",1792182886646]