Your Quantum-Safe Migration Has a Deadline. Does It
Have a Leader?
In June 2026, the White House gave every federal agency 30 days to name a leader for its post-quantumcryptography (PQC) migration. Who is leading yours?The same order directs a procurement rule that would hold covered federal contractors to NIST's PQCstandards by the end of 2030, and it directs agencies to help critical infrastructure operators plan. Everyorganization now needs an accountable, qualified migration leader, and they are in short supply.
The algorithms are settled. The expertise is not in place.
NIST approved its first three PQC standards in August 2024, and major vendors now ship them. Protocol standards, product support, and validations are still maturing, so deployment depends on experienced people. In the 2026 Entrust and the Ponemon Institute study of more than 4,000 IT and security practitioners, 38 percent cited a lack of in-house expertise as a barrier to post-quantum readiness, up from 28 percent a year earlier. Visibility (41 percent) and budget (39 percent) ranked slightly higher, but expertise rose the most.
The work calls for two complementary capabilities. Program leadership combines cryptography, enterprise architecture, regulatory knowledge, and the standing to brief a board. Cryptographic engineering covers algorithm choices, hybrid designs, performance, and implementation risk. Few organizations have both, so training and experienced guidance need to run together.
Hiring alone will not close the gap
A fractional PQC leader joins your leadership team for set days each month. As an advisor, they recommend the migration strategy and roadmap and brief the board and C-suite. As a fractional executive with delegated authority, they also direct your architects and engineers. The engagement terms set the decision rights, and accountability stays with your named executive.
As well, a fractional post-quantum cryptographer provides the technical depth. They review designs and vendor evidence, recommend algorithms and parameters within applicable standards and policy, and stay engaged through rollout to resolve protocol and integration problems.
The model works because senior judgment is shared across several programs while each clients permanent team carries out the sustained work. You can engage one or both roles, under clear confidentiality and conflict-of-interest terms.
The fractional model
A fractional PQC leader joins your leadership team for set days each month. As an advisor, they recommend the migration strategy and roadmap and brief the board and C-suite. As a fractional executive with delegated authority, they also direct your architects and engineers. The engagement terms set the decision rights, and accountability stays with your named executive.
As well, a fractional post-quantum cryptographer provides the technical depth. They review designs and vendor evidence, recommend algorithms and parameters within applicable standards and policy, and stay engaged through rollout to resolve protocol and integration problems.
The model works because senior judgment is shared across several programs while each client’s permanent team carries out the sustained work. You can engage one or both roles, under clear confidentiality and conflict-of-interest terms.
When it fits, and what you receive
Fractional engagement fits when a named executive is accountable, an internal team can execute, and the gap is senior judgment, not headcount. Where a program needs embedded staff or has no team to execute, it complements a hire or an integrator.
The engagement produces defined deliverables: a cryptographic inventory plan and risk-ranked roadmap, architecture decisions and supplier requirements, pilot and acceptance criteria, and board reporting on progress and risk.
What it delivers
- Speed. Leadership is in place quickly not after a search that can take months.
- Matched commitment. The fractional leader and/or fractional cryptographer time is engaged in proportion to the workload.
- Lower program risk. Early decisions on inventory, priorities, and vendors shape much of what follows, and experience at the start can reduce avoidable rework.
- Stronger internal teams. A good fractional leader develops your people, so reliance on outside help can fall over time.
The model suits both large enterprises that lack this specialty and smaller companies that cannot outbid them for it.
Where consulting firms fit
Consulting firms and integrators will staff many of these programs, and they can provide senior specialists too. However, ask any provider the same questions. Who is the named specialist, and will they stay? What relevant experience do they bring? How much of their time is committed, and what will they deliver?
Independence is not automatic. It rests on disclosed relationships and written engagement terms.
The question for your next leadership meeting
Who is accountable for our cryptographic migration, and what evidence shows they can deliver it? Look for relevant cryptographic transition experience, hands-on PQC implementation work, and a record of delivery. If the answer is unclear, the program is already at risk.
We place fractional PQC leadership and cryptographic advisory expertise. Our search specialty is PQC migration, quantum resilience and AI infrastructure leaders and experts, for fractional as well as permanent roles. Please reach out to us at info@hermancollins.com. We would welcome a conversation.
Sources
- Executive Order 14412, Securing the Nation Against Advanced Cryptographic Attacks, White House, June 22, 2026: the 30-day migration lead requirement, the contractor rule, and critical infrastructure assistance.
- NIST, Announcing Approval of Three Federal Information Processing Standards (FIPS) for Post-Quantum Cryptography, August 13, 2024: approval of FIPS 203, 204, and 205.
- Entrust and Ponemon Institute, 2026 Global State of Post-Quantum and Cryptographic Security Trends, news release of January 27, 2026: 4,149 IT and security practitioners surveyed, with the expertise, visibility, and budget figures.
