Singapore quantum-safe migration: 2027 plans and pilot grants

An organisation does not need a quantum computer to acquire a quantum problem. It may hold information whose confidentiality must survive for years, while the systems protecting it take years to replace. Singapore’s latest response gives that mismatch a practical timetable.

On 14 October 2026, the Cyber Security Agency of Singapore (CSA) announced new guidance for organisations exposed to quantum-related cybersecurity risks. They are encouraged to prepare migration plans by the end of 2027 and complete migration by 2035. The announcement also introduced a Quantum-Safe Kickstarter Grant for practical pilots. This is a preparation programme: it does not establish that a computer capable of breaking today’s widely used public-key cryptography has arrived. CSA says the timing remains uncertain. CSA announcement.

The dates require careful reading. CSA’s guidance for Critical Information Infrastructure (CII) owners was issued in June 2026, with migration of CII systems expected by 2031. The October advisory broadens preparation beyond that group; its 2035 date is a recommendation for exposed organisations, rather than a newly enacted universal deadline. Migration advisory.

Begin with the information and the system

For organisations outside CII, the first decision is whether their exposure warrants action. CSA highlights information requiring long confidentiality, internet-facing services and equipment with lengthy replacement cycles. It also recommends assigning responsibility, testing replacement cryptography and asking suppliers about upgrade schedules and costs. Larger keys and computational demands can affect performance, making testing part of the migration itself. Migration advisory.

A useful plan would connect those questions to a real service. Consider a hypothetical manufacturer renewing a remote-access platform for long-lived equipment. Its purchasing team should establish which components use vulnerable cryptography, which supplier controls each upgrade, and whether the proposed configuration works within operational limits. A product label cannot answer those questions. They require an agreed test environment, measurable acceptance criteria and a record of unresolved dependencies.

The institutional implication is that migration belongs in ordinary investment decisions. A system bought today may still be operating when its cryptographic assumptions need to change. Procurement, technical and business teams therefore need a shared account of the service’s expected life and the cost of keeping it usable.

A pilot should produce a decision

The grant offers a bounded route into that work. Its detailed eligibility rules cover non-government organisations registered and incorporated in Singapore, undertaking pilots in Singapore-based operations. Funding covers up to 70% of project costs excluding GST, with a 30% cash contribution required. Applications are open; projects receive up to six months and must finish by 31 October 2027. Grant details.

The programme asks participants to document test methods, outcomes, limitations and resources used. Negative or inconclusive results are expressly valuable. CSA also states that inclusion on its non-exhaustive vendor list is not an endorsement. These details give buyers a reason to separate a supplier’s promise from what a pilot actually establishes. Grant details.

A sensible outcome might be permission to expand a deployment, a narrower redesign, or a decision to wait for a missing capability. Each can be useful if the evidence explains why. Organisations should decide in advance who will make that decision and which unresolved risks require further work.

CSA’s supporting handbook and readiness index provide planning resources that organisations can revisit as their systems and available solutions change. Handbook and readiness index. The immediate opportunity is to turn a distant security concern into a documented, affordable next step, while keeping readiness claims tied to the systems actually assessed.

To explore a bounded inquiry, see JUSNREM’s invitation to collaborative research and pilots.