S.Amdt. 3684

SA 3684 is an amendment to bill S. 2296. Its purpose is to add a new section (Section 1067) focused on the Strategy for Federal Agency Migration to Post-quantum Cryptography.

The amendment aims to add the following requirements to the bill:

• National Quantum Cybersecurity Migration Strategy: The Subcommittee on the Economic and Security Implications of Quantum Information Science must create a strategy that defines cryptographically relevant quantum computers, recommends standards for identifying them, assesses the urgency of migration for Federal agencies, and sets performance measures for four stages of migration. It also requires a plan to monitor high-risk entities, including critical infrastructure providers.

• Post-quantum Pilot Program: The Subcommittee must start a program requiring each sector risk management agency to upgrade at least one high-impact system to post-quantum cryptography by January 1, 2027.

• Cost and Resource Analysis: The Administrator of the Office of Electronic Government must survey Federal agencies to find the costs of migration, including equipment, personnel, and time. They must also identify necessary resources and advise on how to encourage private sector adoption.

• Accountability and Reporting: The Director of the Office of Management and Budget and the Subcommittee must submit a joint report to Congress within one year. Additionally, the Comptroller General of the United States must provide an annual assessment to Congress on the progress each Federal agency has made in migrating to post-quantum cryptography.