Preparing for OMB PQC Reporting: A Practical Framework for Federal Agencies
Federal agencies are now required under OMB Memorandum M-23-02 and National Security Memorandum-10 to inventory cryptographic assets, identify quantum-vulnerable algorithms and report progress toward post-quantum cryptography (PQC) readiness. Yet many agencies are unsure what these mandates actually require in practice, how discovery and inventory tools fit into compliance or how to determine whether their current environments provide sufficient cryptographic visibility.
Webinar recording from February 19, 2026
Navigating the Government’s Transition to Post-Quantum Encryption: A Strategic Approach
As quantum computing continues to evolve, the security of existing cryptographic systems faces an unprecedented threat. Post-quantum encryption (PQE) is no longer a distant goal; it is a critical, urgent priority. Marion Square has been actively tracking the federal government’s transition to PQE, working closely with both technology companies and government agencies to ensure a smooth and secure transition.
Federal mandates such as NSM-10 and OMB 23-02 have set the course for agencies to begin their PQE journeys. The stakes are high, and failure to meet these mandates could expose critical systems to quantum-enabled adversaries. According to the recent OMB report to Congress, the government is expected to spend approximately $1 billion annually over the next decade on this transition, though many experts predict the true cost could be much higher.