The National Cyber Security Centre (NCSC) has brought in quantum-secure encryption pioneer Arqit Quantum to help lead the UK’s looming migration to quantum cryptography .
The NCSC PQC pilot scheme is part of a wider government initiative – the Accredited Cyber Security Consultancy (ACSC) scheme – which seeks to build national expertise in preparing mainstream organisations to undertake this complex migration, which could begin in earnest by 2028.
Arqit’s role will be to provide discovery and migration planning services to organizations preparing to enable quantum secure technology, centering its crypto intelligence product, which is designed to help users discover, assess, and manage their cryptographic risks and exposures.
“Post-Quantum cryptography is one of the few moments in cyber history where we can act before a crisis hits,” said Arqit CEO Andy Leavers. “Being selected by the NCSC to participate in the PQC pilot is a strong endorsement of our approach, using a crypto intelligence product to support UK organisations as they face the challenge of PQC migration. This programme will help businesses move from uncertainty to action, with clear guidance and practical tools to future-proof their security.”
It is now well known that classical cryptographic algorithms, which lie at the core of modern cybersecurity, will very likely crash and burn when quantum computing becomes a reality, threatening the confidentiality of sensitive communications, data, and authentication systems.
The NCSC has already outlined a phased migration plan, recommending that organizations should start the planning process now, with the highest priority improvements completed by 2031, and completion set for 2035, ten years later.
Arqit claims that its encyption Intelligence product can help organizations through the process by allowing them to map and understand existing crypto assets and dependencies, assess the risk of critical systems, and prioritize early high-priority updates.
It says that investing in cryptographic prowess today can also ensure that organizations adapt as new standards and updates emerge in the years to come.
ARQIT’s admission to the PQC pilot follows its recent acquisition of Belfast-based crypto risk consulting and analytics technology startup AmpliPhae earlier in 2025, a combination that the partners hope will leverage synergies between Arqit’s existing quantum expertise and Ampliphae’s visibility and analytics capabilities.
A number of other consultancies are also involved in the pilot scheme, which the NCSC says will work with government and critical national infrastructure (CNI) operators – and wider industry – to identify the right support. In addition to ARQIT, these include Avella, Cambridge Consultants, Capgemini, CGI IT, Frazer-Nash, IBM and Pqshield.
All involved have demonstrated their ability to provide support services for cryptographic discovery and planning, and some are confident in offering direct advice on the use of PQC that aligns with the NCSC’s published positions.
However, this comes with a caveat – the NCSC has said that while the pilot is designed to provide reassurance, buyers should still conduct their own commercial due diligence during procurement exercises.
The current pilot is expected to run until the end of March 2027, at which time it will be reviewed.
