Quantum Risk, Readiness, and the Enterprise Boardroom with Richard Entrup

Quantum Risk, Readiness, and the Enterprise Boardroom with Richard Entrup

🎙 The New Quantum Era 👥 327 📅 August 24, 2026 ⏱ 35 min 👁 1 📄 expert opinion 🧭 2026-08-24
Available in: English (current) Français

Keywords

Q-Daycrypto agilityharvest now decrypt laterPQC migrationquantum opportunity

Summary

In this episode of The New Quantum Era, host Sebastian Hassinger interviews Richard Entrup, Managing Director of Emerging Solutions at KPMG US. Entrup brings a unique perspective as a former CIO, CTO, CDO, and CISO at major corporations like Verizon, Disney/ABC, and Tiffany & Co. The conversation focuses on the enterprise implications of quantum computing, particularly the risks associated with post-quantum cryptography (PQC) migration. Entrup argues that the exact date of Q-Day is less important than the time required for organizations to inventory and remediate their cryptographic exposure, which could take five to ten years. He emphasizes the scale of the problem, noting that a single laptop can contain hundreds of cryptographic components, and that dependencies across supply chains make this a systemic challenge. The discussion also covers the ‘harvest now, decrypt later’ threat model, the need for crypto agility, and the role of AI in accelerating the threat timeline. On the opportunity side, Entrup discusses KPMG’s ‘good quantum’ initiatives, including research partnerships and client collaborations, and compares the current state of quantum to the early internet infrastructure phase. He also touches on the challenges of vendor independence and the suitability of the big-four advisory model for addressing quantum risks.

200 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of this conversation lies in its practitioner perspective, offering insights that are often missing from hardware-focused quantum discussions. Entrup’s argument that Q-Day’s date is less critical than the time needed for enterprise remediation is well-supported by his operational experience. He effectively highlights the complexity of cryptographic migration, including the scale of components, supply-chain dependencies, and the need for continuous monitoring. The discussion on ‘harvest now, decrypt later’ and the role of AI in code-breaking adds urgency to the risk narrative. However, the argumentation is largely anecdotal and lacks quantitative evidence or references to independent studies. The comparison to the early internet is illustrative but not deeply explored.

Scientific Rigor, Source Quality, Title Accuracy

The episode maintains a high level of rigor in its discussion, with Entrup drawing on his extensive professional background. The sources cited are primarily KPMG reports and articles, which are relevant but may introduce institutional bias. The title accurately reflects the content, focusing on quantum risk and enterprise readiness. The conversation is well-structured, but the lack of independent sources and the reliance on KPMG’s own materials slightly diminish the overall source quality. The adéquation between title and content is strong, with the discussion directly addressing the boardroom perspective on quantum risk.

215 words

Title / Content Match

The title accurately reflects the content, focusing on quantum risk and enterprise readiness from a boardroom perspective.

Quality & Reliability

7/10

The discussion is grounded in the practitioner experience of a former CIO/CISO, providing credible insights into enterprise cybersecurity and quantum risk management. However, it is primarily opinion-based, with limited technical depth and reliance on KPMG's own reports, which may introduce institutional bias.

Key Moments

Cited Sources

Concurring Sources

Dissenting Sources

Contribution & Novelties

The episode provides a rare practitioner perspective on quantum risk management, emphasizing the operational challenges of PQC migration over theoretical timelines. It introduces the concept of ‘crypto agility’ as a dynamic framework for enterprise cryptography, and highlights the often-overlooked supply-chain dependencies in cryptographic infrastructure. The discussion also underscores the accelerating role of AI in code-breaking, adding a new dimension to the urgency of quantum readiness.

Pour aller plus loin :

118 words

Radar Profile

The radar profile shows a balanced score across information quantity, quality, technical level, and reliability, with a slight dip in technical depth. This reflects the episode's focus on enterprise strategy rather than technical implementation, making it accessible to a board-level audience while still providing substantive insights.

Reliability 7/10

💬 Sur les 0 commentaires analysés, aucune tendance n'est disponible.