Insights

Post-quantum and Hong Kong cybersecurity, explained

Clear, practical writing on the topics Hong Kong's regulated firms are being asked to answer — from harvest-now-decrypt-later to the HKMA's PACT framework.

Post-quantum

Harvest-now, decrypt-later: why you cannot wait to migrate

The attack is already underway. Data encrypted today is being stolen and stored until a quantum computer can break it. Here is the timeline and what it means for Hong Kong firms.

Hong Kong · HKMA

HKMA's PACT framework, explained: 23 workstreams banks must answer

The HKMA and HKUST published PACT in November 2026 — a post-quantum transition framework for banks. We break down the four pillars and what each asks of you.