Quantum Computing and Cybersecurity: What Asset Managers Must Do Next

Quantum Computing and Cybersecurity: What Asset Managers Must Do Next

The Converging Frontier: New Risks, New Solutions

Asset management firms face an accelerating intersection of cloud dependence, artificial intelligence, and emerging quantum computing. Quantum progress threatens current public-key cryptography used across trading, clearing, custody, and client communications while also offering computational power for risk analytics and security innovations. That dual role makes cybersecurity an urgent strategic priority rather than a purely technical matter.

Quantum’s Impact Across Financial Operations

Quantum effects will vary by function. Key areas at risk or set to benefit include:

  • Front office: Quantum-supported optimization could improve portfolio construction and execution algorithms. At the same time, model integrity and data confidentiality are exposed if encryption is broken.
  • Middle office: Risk modelling and real-time analytics may accelerate, but market risk systems and fraud detection engines must be protected from tampering and data exposure.
  • Back office: Settlement, reconciliation, custody and blockchain-based tokenisation face cryptographic vulnerability. Signature schemes used in digital asset ledgers may be rendered insecure by future quantum algorithms.

Preparing for the Quantum Era: Regulatory Foresight

Regulators are not waiting. The UK Financial Conduct Authority has published research and is engaging with industry to map quantum use cases and risks, urging firms to assess their cryptographic estate and third-party dependencies. The regulatory focus is on operational resilience, vendor risk, and forward-looking transition plans to post-quantum cryptography standards.

Strategic Imperatives for Asset Managers

Practical steps firms should adopt now include:

  • Inventory cryptographic assets and classify data by sensitivity.
  • Plan phased migration to post-quantum cryptography and adopt hybrid crypto for high-risk channels.
  • Review cloud and vendor contracts for quantum risk clauses and service continuity.
  • Run scenario exercises that model quantum-enabled breaches and recovery paths.
  • Build or partner for quantum expertise, integrate governance across risk, technology and compliance, and maintain active dialogue with regulators.

Quantum will reshape both attack surfaces and defensive capabilities. For asset managers the immediate priority is a measured, governance-led program that protects client assets and preserves operational resilience as the technology matures.