The National Quantum Cybersecurity Migration Strategy Act of 2025.

Enhanced Security Against Quantum Attacks: The bill requires a National Quantum Cybersecurity Migration Strategy to assess the risks agencies face if a cryptographically relevant quantum computer attacks their systems (Section 3(a)(3)). This aims to protect sensitive information by moving toward post-s-quantum cryptography, which is not vulnerable to attacks by quantum or classical computers (Section 2(4)).

Protection of Critical Infrastructure: The strategy includes a plan for monitoring entities at high risk of attacks, specifically mentioning providers of critical infrastructure (Section 3(a)(5)).

Improved Oversight of Federal Transition: By requiring the Office of Electronic Government to verify that cost estimates for migration are realistic and fiscally sound, the bill ensures that the transition is planned with proper resource identification (Section 3(c)(1)-(3)).

Progress Monitoring: The Comptroller General is required to submit annual assessments to Congress regarding the progress of each Federal agency in its migration, ensuring accountability in the security transition (Section 3(e)).

Mandatory System Upgrades: The bill establishes a post-quantum pilot program that requires each sector risk management agency to upgrade at least one high-impact system to post-quantum cryptography by January 1, 2027 (Section 3(b)).

Potential Financial and Resource Burdens: Federal agencies will need to account for costs related to personnel, equipment, and time required to implement these new cryptographic standards (Section 3(c)(1)).