Enterprises Unprepared for AI and Quantum Cyber Threats
A PwC survey of nearly 4,000 global leaders reveals that most enterprises are significantly behind in preparing for AI-driven cyberattacks and quantum computing threats, with only 21% implementing quantum-resistant security measures. The skills gap and reliability concerns around autonomous AI defense tools are leaving organizations exposed as adversaries increasingly leverage AI for offensive operations. This preparedness gap is particularly dangerous because quantum computing threatens to render current cryptographic standards obsolete, potentially exposing encrypted data retroactively through 'harvest now, decrypt later' attacks. Without proactive investment in emerging threat readiness, organizations risk being caught flat-footed when these technologies become weaponized at scale.
Tactical Insight
Immediate actions
- Conduct a formal risk assessment to identify systems most vulnerable to AI-augmented attacks and quantum decryption threats.
- Inventory all cryptographic implementations across your environment to prioritize migration to post-quantum algorithms.
- Establish a dedicated emerging threats working group to monitor NIST post-quantum cryptography standards and AI threat developments.
Long-term improvements
- Begin a phased migration to NIST-approved post-quantum cryptographic standards (e.g., CRYSTALS-Kyber, CRYSTALS-Dilithium) for critical data and communications.
- Invest in upskilling security teams on AI-assisted defense tooling and quantum-safe architecture design.
- Embed AI and quantum threat scenarios into annual security strategy reviews and board-level risk reporting.
Detection & governance measures
- Pilot AI-assisted threat detection tools in a monitored, human-supervised capacity before moving toward greater autonomy.
- Establish clear governance policies defining acceptable use and oversight requirements for autonomous AI security tools.
- Participate in industry threat intelligence sharing groups focused on AI and quantum threat actor activity.