Quantum Compliance Pulse, August 2026
Monthly brief, edition 02. 10 pages.
A summary of the month's post-quantum developments for Swiss and EU financial institutions. It covers a DigiCert survey of 1,001 firms in the US, UK, and Australia, a FINMA survey of 60 Swiss institutions, FINMA Guidance 05/2026, and four upcoming dates. For each date it says whether it is a law, a roadmap, or supervisory guidance. Get it to brief your risk committee in ten pages instead of reading every source yourself.
Get the download
Tell us where to send the link. A business email is required.
72 percent of Swiss financial institutions surveyed by FINMA had taken or planned no post-quantum measures. Only about 8 percent had a concrete roadmap.
Edition 02 of DuoKey's monthly brief separates what firms are doing from what they must do. The DigiCert and FINMA surveys show how far firms have got. The dated items show what is coming, and whether each is a law, a roadmap, or guidance.
In the DigiCert survey, 87 percent said they were planning, testing, or implementing post-quantum cryptography, yet only 7 percent had moved most of their certificates. The brief also offers a quick test: time how long it takes your team to answer one question. Are your cryptographic modules certified to FIPS 140-2 or 140-3?
Ten pages, so you don't have to read every source yourself. Download it before your next risk committee.
FAQ
What did the FINMA survey find?
Of 60 Swiss financial institutions surveyed between November 2025 and January 2026, 72 percent had taken or planned no post-quantum measures, and about 8 percent had a concrete roadmap.
Is FINMA Guidance 05/2026 binding?
No. It is a supervisory communication, not a circular. It says existing governance and risk rules already cover quantum risk, and it recommends a post-quantum roadmap by mid-2027.
Are the DigiCert figures about Switzerland?
No. They come from the US, UK, and Australia. 7 percent of respondents said most of their certificates were quantum-safe or hybrid, up from 5 percent in May 2025.
Why is a NIST date included?
On 21 September 2026, NIST moves remaining FIPS 140-2 certificates to Historical status. This affects new procurements, including in Europe.