Philippine companies may have less time than expected to prepare for a new class of cybersecurity risk. BusinessWorld reported that experts at the Asian Institute of Management’s Y2Q Horizon forum warned a cryptographically relevant quantum computer could arrive as early as 2029 or 2030. That milestone, often called Q-Day, would threaten widely used encryption methods and could expose data that businesses assume is protected today. The warning shifts quantum security from a distant research topic into a planning issue for banks, enterprises and government services.
The concern centers on public-key systems such as RSA and Elliptic Curve Cryptography, which help secure websites, email and other internet services. A sufficiently capable quantum computer could use new algorithms to solve the mathematical problems that make those systems difficult to break with classical machines. The immediate risk is not that every encrypted connection will fail tomorrow. It is that sensitive data captured now could be stored and decrypted later, creating a long-term exposure for records that must remain confidential.
Ramesh Nagarajan of Eigensystems told BusinessWorld that businesses should begin by identifying their cryptographic assets and mapping which systems need the strongest protection. Payment platforms, customer records, intellectual property and critical digital services should receive priority because a compromise would carry operational or financial consequences. NIST’s post-quantum guidance similarly treats migration as an inventory, testing and replacement exercise across core systems. Organizations need to know where vulnerable algorithms are embedded before vendors, applications and connected devices can be upgraded safely.
The transition will take time because quantum-safe algorithms must be evaluated across software, hardware, certificates and third-party services. AIM professor Francisco Acedillo said Philippine businesses and government are not yet prepared for the Y2Q transition and called for public-private cooperation. Companies can start with a roadmap, risk ranking and pilot implementations instead of waiting for a final deadline. Early preparation also reduces the chance that a rushed migration will interrupt payment systems, public services or other infrastructure that depends on trusted digital identity.
