Michael Elmore, SVP and Global Chief Information Security Officer at GSK, said the move to post-quantum cryptography has become one of the most urgent issues in enterprise cybersecurity. His warning was direct: organizations that wait too long could be left behind as quantum computing moves closer to practical impact.
The article frames quantum computing as a present security concern rather than a distant theory. Widely used encryption standards that support today’s global digital infrastructure could eventually be broken, and that changes the risk profile now for companies holding sensitive data that must remain protected for years or even decades.
“Harvest now, decrypt later” is already shaping the threat model
Elmore said adversaries are already using a “harvest now, decrypt later” approach, collecting encrypted data today with the expectation that it can be read in the future. For enterprises, that means some of their most valuable information may already be exposed, even if it cannot currently be understood.
He is expected to present a practical roadmap for readiness, centered on the view that post-quantum migration is a multi-year effort that must start immediately. The priorities listed in the article include building full cryptographic inventories, creating crypto-agile systems that can adapt to new standards, protecting high-risk and long-life data first, and using phased migration plans that can scale.
Pharma data faces a particularly long security horizon
The warning carries extra weight for pharmaceutical companies. Intellectual property, clinical trial data, and patient records may need to stay secure for decades, making quantum resilience a factor tied to long-term competitiveness, regulatory compliance, and institutional trust. In that context, the issue is not abstract. It reaches into core business operations.
The article also highlights several takeaways: global encryption standards are nearing obsolescence, sensitive data may already be at risk because of delayed decryption strategies, and migration to post-quantum systems will take years rather than months. It adds that enterprise, telecom, and government leaders are increasingly aligned on the need to act.
Quantum.Tech World 2026 will focus on standards and execution
The warning is presented as part of a broader industry shift. At Quantum.Tech World 2026, IBM’s Jai Arun is set to discuss how quantum-safe security and crypto-agility are being embedded in enterprise systems. AT&T’s Rich Baich will address the future of quantum networks and the infrastructure needed for secure communications. NIST’s Lily Chen will join discussions on post-quantum cryptography standards and migration strategy, alongside enQase executives Rajesh Patil and Steven Menges.
The event is scheduled for June 25–26, 2026 in Boston. Organizers say it will bring together more than 1,000 senior decision-makers across enterprise, government, and research, feature more than 150 speakers, and include all 17 U.S. Department of Energy national laboratories. The article presents it as a concentrated venue for decision-makers working across quantum, AI, HPC, and cybersecurity.
The direction described in the piece is clear enough: the risk is already emerging, the migration timeline is measured in years, and the main question for enterprises is no longer whether post-quantum security matters, but how quickly execution begins.