Migration Roadmap

A phased plan from discovery to validated post-quantum readiness.

Overall migration progress

Target: PQC coverage across payment and identity by 2030

38%

Phase 1 · Q1 2026
Discover
Complete
100%
- Inventory cryptographic assets
  Security Engineering
- Generate CBOM
  Security Engineering
- Identify legacy algorithms
  AppSec
Phase 2 · Q3 2026
Prioritize
In Progress
62%
- Calculate quantum risk
  Risk Office
- Identify critical assets
  Risk Office
- Prioritize long-lived data
  Data Platform
Phase 3 · Q1 2027
Prepare
Planned
12%
- Select PQC algorithms
  Cryptography Guild
- Test compatibility
  Platform SRE
- Create hybrid architecture
  Architecture
Phase 4 · Q3 2027 – Q4 2029
Migrate
Planned
0%
- Replace vulnerable algorithms
  App Teams
- Update certificates
  PKI Team
- Upgrade libraries
  App Teams
- Update infrastructure
  Platform SRE
Phase 5 · 2030
Validate
Planned
0%
- Re-scan estate
  Security Engineering
- Verify PQC adoption
  Risk Office
- Generate compliance report
  Compliance

Next milestone

Complete prioritisation of long-lived data stores before Q4 2026 to keep the 2030 migration deadline achievable.