If post-quantum cryptography sounds like a distant, academic problem, consider this blunt piece of advice from a practitioner: enterprises must begin the transition now. "Enterprises need to start planning and executing their transition to post-quantum cryptography," said Moona Ederveen-Schneider, a bank cybersecurity veteran and the founder of consultancy Resilia Connect.
The practitioner's diagnosis
Moona Ederveen-Schneider frames the post-quantum migration not as an abstract research agenda but as an operational task that organizations can and should tackle today. Drawing on her experience in banking cybersecurity, she emphasizes that the right approach can demystify a complex technical shift and move it from theory into practice.
A concrete way in: tabletop exercises
Her recommended entry point is immediately actionable: tabletop exercises. According to Ederveen-Schneider, tabletop exercises are the best way to start the work of transitioning to post-quantum cryptography. These exercises are meant to marshal the necessary internal participants so planning and decision-making are realistic and coordinated.
- Security — the teams responsible for technical design, implementation and risk assessment.
- Human resources — the functions that manage training, staff roles and change management.
- Legal — the advisers who parse regulatory, contractual and compliance implications.
- Finance — the groups that evaluate cost, procurement and budgeting for transition efforts.
What this approach accomplishes
By calling for tabletop exercises and identifying the cross-functional participants, Ederveen-Schneider shifts the conversation from abstract timelines and technical standards to organizational readiness and coordination. The method is intended to: clarify responsibilities across domains, surface practical obstacles, and create a shared plan that moves from planning toward execution.
Closing consideration
Moona Ederveen-Schneider’s guidance is simple and procedural: treat the post-quantum transition as a program that organizations must plan and execute, and begin by convening the right internal stakeholders in a structured exercise. If the objective is to demystify a complex transformation and make it manageable, the question becomes operational rather than hypothetical — when will your organization sit down to run that first tabletop?
https://www.govinfosecurity.com/practical-post-quantum-transition-start-now-heres-how-a-31393
