7. Intelligence Community · Minor
Order immediate reviews of post-quantum encryption implementation
Printed page 228 7. Intelligence Community
“The President-Elect should require immediate reviews of the progress in implementing post-quantum encryption at a minimum for IC and Defense systems but preferably throughout the government.”
What has happened
- Partially done
Executive Order 14412 puts the reviews the Quote asks for on a standing footing. Section 4(a) makes every agency head name a PQC migration lead within 30 days; section 4(b)(i) makes OMB require every agency to review its inventory of high value assets and high impact systems; and section 5(c) requires the Director of NSA, as National Manager for National Security Systems, to report to the President within 180 days and annually thereafter until migration is complete on the status of PQC migration for agencies owning or operating National Security Systems — that is the IC and Defense half of the ask, government-wide coverage being the other half. Executive Order 14413, signed the same day, adds a tasking to the DNI and the Secretary of War to identify the national security implications of commercial quantum computing, including for the PQC migration. `partial` rather than `done` because the mechanism is in place but the first NSS status report is not due until around 2026-12-19 and no review has yet been delivered.
- Attempted
Executive Order 14306 rewrote the post-quantum section of Executive Order 14144. The new subsection 4(f) recites National Security Memorandum 10 and directs CISA, in consultation with NSA, to publish and maintain a list of product categories in which post-quantum-cryptography products are widely available, and directs the Director of NSA for National Security Systems and the Director of OMB for everything else to issue PQC transition requirements, both by 2025-12-01. A directive on the object without a progress review yet.
Research log
What was searched, and what didn’t count as evidence
Research notes
- Boundary call: anyone who reads the ask as “require reviews” rather than “produce reviews” would level the 2026-06-22 event done, since Executive Order 14412 imposes exactly the requirement the Quote asks the President to impose.
- The operative words of both orders were read at https://www.govinfo.gov/content/pkg/FR-2026-06-25/html/2026-12909.htm and https://www.govinfo.gov/content/pkg/FR-2026-06-25/html/2026-12910.htm, and of Executive Order 14306 at https://www.govinfo.gov/content/pkg/FR-2025-06-11/html/2025-10804.htm.
- Action
- other
- Object
- Post-quantum encryption implementation reviews
- ID
- 606