CSA Sets Out Quantum-Safe Migration Timeline for Organisations and Launches New Grant
14 October 2026
CSA has issued quantum-safe migration guidance, with CII systems to complete migration by 2031 and other organisations exposed to quantum risks encouraged to do so by 2035. To support early preparation, CSA has also launched the Quantum-Safe Kickstarter Grant to help organisations pilot quantum-safe solutions and address practical migration challenges.
[Singapore, 14 October 2026] The Cyber Security Agency of Singapore (CSA) has issued guidance on quantum-safe migration milestones for organisations in Singapore. The migration of Critical Information Infrastructure (CII) systems should be completed by 2031, while other organisations exposed to the quantum threat are encouraged to complete migration by 2035 to minimise their risk exposure. These include organisations that hold sensitive information that must remain confidential for many years, or thosse that provide critical services such as communications or digital transactions where maintaining integrity and confidentiality is crucial. To accelerate migration efforts, CSA has also launched the Quantum Safe Kickstarter Grant to support organisations in piloting quantum-safe solutions and taking practical steps towards migration, with priority given to CII owners. This was announced by Mrs Josephine Teo, Minister for Digital Development and Information and Minister-in-charge of Cybersecurity and Smart Nation Group at the Singapore International Cyber Week 2026.
Advances in quantum computing could eventually undermine widely used cryptographic methods that protect digital communications, transactions and sensitive information today. Although it remains uncertain when quantum computers will become capable of breaking these methods, organisations need to begin preparing for the transition.
Quantum-safe migration is a complex undertaking. Cryptography is embedded across applications, networks, infrastructure and interconnected systems, often involving multiple technology vendors. Organisations will need time to identify their cryptographic dependencies, assess risks, test suitable solutions and implement changes without disrupting their operations. This is particularly important for critical infrastructure and legacy systems, where technology changes must be carefully managed.
Singapore has started preparing early for quantum-safe migration, adopting a risk-based approach that prioritises CII systems. In June 2026, CSA issued quantum-safe migration guidance to CII owners with key milestones, including the completion of quantum-safe migration of CII systems by 2031. By preparing early, organisations can manage the transition in a planned and orderly manner, rather than waiting until quantum threats become imminent.
As part of Singapore’s efforts to strengthen quantum-safe readiness, CSA has taken two further steps to help organisations move from planning to action.
New Guidance to Other Organisations Exposed to the Quantum Threat
CSA has published a new advisory recommending that organisations exposed to quantum-related cybersecurity risks put in place a quantum-safe migration plan by 2027, and aim to complete migration by 2035, the latter being in line with international guidance. These include organisations that hold sensitive information requiring long-term confidentiality, as well as those providing important services such as communications and digital transactions, where maintaining the integrity and confidentiality of information is essential.
The advisory sets out practical and low-risk steps organisations can take now, including assessing their risk exposure, identifying their most important systems, and engaging technology vendors and partners to understand available quantum-safe solutions.
Organisations can also refer to the updated Quantum Readiness Index and Quantum-Safe Handbook, which incorporate feedback from the public consultation and reflect the latest developments in quantum-safe cryptography standards. The resources will help organisations assess their readiness and plan their transition.
The advisory and supporting resources are available on CSA’s website:
Quantum-safe handbook: https://www.csa.gov.sg/resources/publications/quantum-safe-handbook-and-quantum-readiness-index/ (opens in new tab).
Quantum-Safe Kickstarter Grant
To help organisations translate their migration plans into action, CSA has launched a Quantum-Safe Kickstarter Grant, which will provide time-bound seed funding for organisations to pilot quantum-safe solutions and address practical migration challenges.
The grant will be open to all organisations, with priority given to CII owners, and will run from 1 November 2026 to 31 October 2027, with each funded pilot lasting up to six months. Organisations may undertake pilots in-house or work with suitable solution providers. Use cases which address common migration challenges will be prioritised, including:
End-to-end migration of an application/system;
Cryptographic discovery and inventory;
Migration of Operational Technology (OT), legacy and infrastructure-heavy systems.
Pilot participants will be required to submit a report of their learnings and demonstrated impact. Applications are now open and will be subject to CSA’s assessment of project eligibility, scope, alignment, and strategic value. CSA reserves the right to prioritise applications that demonstrate significant impact on Singapore’s cybersecurity ecosystem. Interested parties can write to qsafe-kickstarter@csa.gov.sg and read the info pack at https://www.csa.gov.sg/our-programmes/support-for-enterprises/quantum-safe-kickstarter-grant (opens in new tab).
