MAS Advisory on Addressing Quantum Cybersecurity Threats
In February 2024, the Monetary Authority of Singapore (MAS) issued an advisory to CEOs of financial institutions, urging them to address the cybersecurity risks associated with quantum.
MAS is the central bank and financial regulatory authority of Singapore. On 20 February 2024 MAS issued a circular to the CEOs of all financial institutions: Advisory on addressing the cybersecurity risks associated with quantum.
In the 3 page memo, MAS sets the scene by highlighting the recognized risks associated with the advent of quantum computers – specifically the threat posed to conventional asymmetric cryptography used widely in today’s public key infrastructure.
Recommendations from MAS
The MAS advisory comprises two core recommendations:
- Attain cryptographic agility
- Implement quantum security
Crypto-agility is essential if financial institutions are to effectively migrate away from a vulnerable state to more secure, post-quantum cryptography (PQC) without having a disruptive impact on their IT infrastructure. At the same time, MAS advocates for the inclusion of other quantum technologies, specifically Quantum Key Distribution (QKD), to help further mitigate risk.
The advisory highlights three initiatives for CEOs to follow:
- Keep abreast of the latest developments in quantum computing and raise awareness of the associated cybersecurity risks.
- Maintain an inventory of all cryptographic assets and identify priority assets for migration to a quantum-resistant state.
- Develop strategies and build capabilities to address the cybersecurity risks associated with quantum.
As part of the monitoring process, MAS advocates for financial institutions to work closely with third party IT vendors and relevant industry groups as part of a “we’re all in this together” strategy – a policy that is echoed by industry giants such as IBM and Thales.
A common-sense approach to quantum-safe migration must include an audit of all existing cryptographic systems. Identify any and all systems that are dependent upon cryptography for data security, integrity, and authenticity. Prioritize those systems most vulnerable to the quantum threat and establish a roadmap for migration to Post-Quantum Cryptography (PQC) and QKD.
Suggested Strategies
MAS offers a few strategies to help financial institutions on their quantum journey:
- Uplift internal technical competencies to support the quantum migration.
- Review all security policies and procedures to ensure they are quantum-relevant.
- Develop risk mitigation strategies for those systems that cannot be migrated.
Importantly, MAS also advocates early adoption and establishing proof-of-concept trials to gauge the likely impact on incumbent systems and highlight any potential implementation challenges.
ID Quantique (IDQ) can provide more information about PQC and QKD, as well as discuss a potential proof of concept for your company or institution.
About ID Quantique
ID Quantique (IDQ), founded in 2001, initially operated as a spin-off company of the University of Geneva, working on research projects to demonstrate the feasibility of quantum key distribution (or QKD, also known as quantum cryptography). In late 2003, IDQ developed the first QKD product for data centers to protect data in transit. 20 years later, IDQ released its 4th generation of quantum key distribution systems and remains the market leader in quantum safe cryptography and quantum sensing solutions. It maintains close ties with academic institutions by participating in numerous research programs and plays a leading role in cutting-edge projects to drive innovation to the market.
To request more information or a quotation for any ID Quantique products, contact IL Photonics.