HKMA: Hong Kong Banks Score 2.3/10 on Quantum Readiness, Target 2030
The city's monetary authority launches a new index and whitepaper as quantum computing threats loom over financial encryption standards.
Hong Kong's banking sector is woefully unprepared for the quantum computing revolution, scoring just 2.3 out of 10 on a new readiness index launched by the Hong Kong Monetary Authority (HKMA).
The regulator unveiled the Quantum Preparedness Index (QPI) alongside a guidance whitepaper on Monday, setting an ambitious target for the industry to reach full readiness—a perfect score of 10—by 2030.
A Wake-Up Call for Financial Security
The stark baseline score exposes a significant gap between Hong Kong's aspirations as a global fintech hub and the current state of its cybersecurity defenses. Quantum computers, once mature, will be capable of breaking the encryption standards that currently protect sensitive financial data and transactions.
According to the HKMA's survey, 68% of banks have begun some form of preparation for the quantum threat, while 32% have taken no steps at all. Among those that have started, approximately half lack a formal road map for adopting post-quantum cryptography (PQC), the next-generation encryption designed to withstand quantum attacks.
Four Pillars of Preparedness
The QPI evaluates banks across four categories: awareness of quantum risks, strategic planning, pilot projects testing PQC solutions, and operational readiness for deployment. The current 2.3 score indicates that most institutions remain in the earliest awareness stage, with few advancing to active pilots or implementation.
The timing is critical. Hong Kong has aggressively pursued digital asset tokenization and financial infrastructure modernization under its broader fintech strategy. These initiatives rely on cryptographic security that quantum computers could eventually compromise.
The Race Against Time
The HKMA's 2030 deadline gives the sector six years to migrate from vulnerable encryption to quantum-resistant standards. Industry experts warn that the transition is not merely a technical upgrade but a complex undertaking requiring coordination across legacy systems, third-party vendors, and international counterparts.
"Harvest now, decrypt later" attacks—where adversaries steal encrypted data today to unlock it once quantum computers become available—mean banks cannot afford to wait. The data they protect now must remain secure for decades.
The whitepaper provides a framework for banks to assess their exposure, prioritize critical systems for PQC migration, and establish governance structures to oversee the transition. The HKMA will likely use future QPI assessments to track progress and identify laggards.
For Hong Kong to maintain its status as a secure financial center, the banking sector must treat quantum preparedness not as a distant concern but as an immediate priority. The next assessment will reveal whether the industry has heeded the warning.