Sandy Carielli with Forrester Research

Scott Mackenzie and Sandy Carielli discuss the implications of quantum computing on cybersecurity. Quantum computers could potentially break today's public key cryptography, compromising data security. Carielli highlights the importance of transitioning to new, quantum-resistant algorithms, such as those developed by NIST. She emphasizes the urgency for organizations, especially government agencies and financial institutions, to start this migration process. Carielli also warns of the "harvest now, decrypt later" attack scenario, where data is intercepted today and decrypted later with a future quantum computer. The conversation underscores the need for proactive measures to ensure digital trust and security.

Action Items

• [ ] Conduct a cryptographic discovery exercise to inventory the algorithms and protocols currently in use across the organization.
• [ ] Bring together a cross-functional team to assess the organization's exposure to quantum computing threats and start the process of migrating to post-quantum cryptography.
• [ ] Incorporate requirements for quantum-resistant cryptography in procurement processes and vendor SLAs.
• [ ] Prioritize the migration of high-value, long-term data and systems that rely on digital signatures.

Outline

Introduction and Purpose of Industrial Talk Podcast

• Scott MacKenzie thanks listeners for their support and highlights the platform's dedication to celebrating achievements and amplifying messages.
• Scott MacKenzie praises Sandy Carielli from Forrester Research for her contributions to quantum computing and cybersecurity.
• The conversation aims to explore the transformative impact of quantum computing on cybersecurity.

Scott MacKenzie's Perspective on Innovation and Technology

• Scott MacKenzie discusses the importance of creating content and demonstrating the human side of professionals in various industries.
• He emphasizes the need for companies to adapt to new technologies and innovations to remain successful.
• Scott MacKenzie shares themes from his conversations with industrial leaders, such as the importance of education, collaboration, and innovation.
• He highlights the need for companies to be nimble, trusted, and passionate about solving challenges.

Introduction to Sandy Carielli and Quantum Computing

• Scott MacKenzie introduces Sandy Carielli and her work at Forrester Research on quantum computing and cybersecurity.
• Sandy Carielli explains the process of selecting topics for research at Forrester, including trends, market exposure, and regulatory changes.
• The conversation touches on the rapid evolution of technologies and the importance of staying current.
• Sandy Carielli mentions the annual top 10 emerging technologies report published by Forrester.

Quantum Computing and Its Impact on Cybersecurity

• Sandy Carielli provides an overview of quantum computing and its potential to break today's public key cryptography.
• She explains the concept of public key cryptography and its role in securing communications and transactions.
• The discussion covers the potential risks posed by nation-states developing quantum computers and the need for cybersecurity measures.
• Sandy Carielli highlights the efforts to develop new cryptographic algorithms resistant to quantum computers.

Preparing for Quantum Computing and Cybersecurity Measures

• Sandy Carielli discusses the "harvest now, decrypt later" attack scenario and the importance of prioritizing data that will remain valuable in the future.
• She emphasizes the need for organizations to migrate to new cryptographic algorithms to protect their data.
• The conversation covers the role of government agencies and financial institutions in leading the migration to quantum-resistant algorithms.
• Sandy Carielli advises organizations to conduct cryptographic discovery to identify and prioritize the algorithms in their environment.

Challenges and Practical Steps for Quantum-Resistant Security

• Scott MacKenzie and Sandy Carielli discuss the challenges of getting stakeholders in an organization to recognize and address quantum computing risks.
• Sandy Carielli highlights the importance of involving various departments, such as development, infrastructure, and procurement, in the migration process.
• The conversation covers the need for organizations to ensure their vendors and partners are quantum-ready.
• Sandy Carielli mentions the role of regulatory bodies in mandating migration timelines to ensure compliance.

Future of Quantum Computing and Its Applications

• Scott MacKenzie and Sandy Carielli discuss the potential timeline for the development of practical quantum computers.
• Sandy Carielli shares insights from cryptographers and experts predicting a timeline of under 10 years for significant advancements.
• The conversation touches on the potential for quantum computers to accelerate deep analysis in fields like pharmaceuticals and drug development.
• Sandy Carielli emphasizes the importance of addressing digital signatures to maintain trust and non-repudiation in digital communications.

Conclusion and Call to Action

• Scott MacKenzie wraps up the conversation by expressing his admiration for Sandy Carielli's expertise and insights.
• He encourages listeners to connect with Sandy Carielli and stay informed about quantum computing and cybersecurity.
• Scott MacKenzie highlights the importance of being proactive and prepared for future technological advancements.
• The conversation ends with a call to action for organizations to start the migration process and ensure their systems are quantum-resistant.