For years, quantum computing has lived in the public imagination somewhere between science fiction and a distant scientific curiosity, a technology perpetually "ten years away." That framing is no longer accurate, and for federal agencies, it's no longer safe. The path to commercialization of quantum technology has begun in earnest, and deadlines are already in sight for executive mandates. Agencies that treat quantum as a future problem will soon find themselves scrambling to catch up to the present.
At CGI Federal, we are working with our clients to explore and shape these capabilities as they evolve.
This blog is the first in a series leading up to CGI’s gold sponsorship of the Quantum World Congress, designed to bring the federal quantum conversation into sharper focus: what's real, what's required and what leaders should be doing right now.
The "Q Problem" is really three problems
When federal executives talk about quantum, they are often talking about three very different things at once. Recent federal directives, including National Security Memorandum 10, the Quantum Computing Cybersecurity Preparedness Act, and subsequent Office of Management and Budget guidance, are focused squarely on the cryptographic threat. Yet they arrive alongside the broader quantum agenda and are often collapsed into one undifferentiated "quantum" mandate.
The technologies, timelines and risk profiles diverge significantly around three intersecting dimensions. The first two:
- Quantum sensing: Using quantum phenomena to detect signals, materials and environmental conditions with unprecedented precision. This has enormous implications for defense, intelligence, navigation (especially in GPS-denied environments) and scientific research.
- Quantum computing: Leveraging qubits, superposition and entanglement to solve certain classes of problems (optimization, simulation, machine learning) that are intractable for classical machines. This is where leading quantum platform providers are beginning to deliver mission-relevant results.
The third dimension, post-quantum cryptography (PQC), is critical but not actually quantum. It is classical cryptography designed to withstand attacks from future quantum computers. Because it's bundled into the same executive orders, and it lands on the same C-suite plate. It often becomes the most urgent of the three because the threat window opens the moment adversaries begin collecting encrypted traffic today for decryption tomorrow. In other words, it has already begun.
Recognizing that these are three distinct workstreams and not one monolithic quantum initiative is the first step toward building a credible federal response.
The federal clock is ticking
Federal agencies have a lot on their plate right now. Between modernization mandates, AI governance, zero-trust deadlines and quantum requirements, the level of action required at the C-suite level is considerable. Quantum-related federal directives are prescriptive about timelines, and they demand more than a whitepaper in response.
While mission owners feel the sharpest edge of the quantum problem because it lands directly on the systems, data and outcomes they are accountable for, the complexity spans the entire C-suite. As such, no single role can solve it alone. Cross-functional collaboration between mission, technology, security and acquisition leaders is essential. Practically, that means CIOs, CISOs, and mission leaders need to be doing several things in parallel:
- Inventorying cryptographic assets so they know where vulnerable public-key cryptography lives across their environment (a prerequisite for any PQC migration).
- Establishing crypto-agility as agencies operationalize the NIST PQC standards (FIPS 203/204/205 finalized in 2024).
- Piloting quantum computing use cases aligned to mission with optimization problems in logistics, scheduling, resource allocation, and simulation as natural starting points.
- Assessing quantum sensing applications relevant to their mission portfolios, particularly in defense, homeland security, and scientific research contexts.
- Building governance and workforce plans now, because the policies, acquisition vehicles, and skill sets needed to operationalize quantum won't materialize overnight and can't be procured on a deadline.
The agencies that prioritize and sequence these workstreams, rather than treating quantum as a single, undifferentiated problem, are the ones making measurable progress.
Commercialization has begun
One of the most important shifts happening right now is that quantum technology is moving out of pure research and into commercial availability. The overarching arc of the quantum story in 2026 is that we are at the very beginning of commercialization and not the end of research.
That distinction matters. It means the tools are real, but the ecosystem is still forming. Standards are still hardening. Talent is scarce. Vendor landscapes are shifting quickly, with new entrants, new modalities and new performance claims arriving almost every quarter. And the learning curve to interact with quantum resources has historically been extremely steep and steep enough that many federal users have stayed away.
Bridging that gap is a core part of CGI Federal's focus. Our partnership with D-Wave and other quantum platforms is specifically aimed at lowering the barrier between mission users and quantum capability so that agency data scientists, analysts, and program managers can experiment, prototype, and eventually operationalize quantum-assisted solutions without needing a PhD in physics.
Why this matters for federal leaders
The federal quantum message is fundamentally different from the commercial one. Private-sector companies can afford to wait, experiment quietly and move when the market signals are unambiguous. Federal agencies cannot. They are bound by executive mandates, national security considerations, and a responsibility to protect data and systems that will still be sensitive decades from now and well within the window where "harvest now, decrypt later" attacks become viable.
For federal leaders, the right posture today is neither hype nor dismissal. It's disciplined prioritization: understand which of the three "Q" workstreams applies to your mission, align your roadmap to the executive order timelines and start building the internal muscle that includes talent, tooling and processes. This will let your agency move when the technology matures the rest of the way.
Quantum is here. For federal agencies, the work of preparing for it cannot wait ten years.
What's next: Follow the quantum conversation
Look for upcoming thought leadership that will go deeper into each of the three "Q" areas and will unpack the federal directives and requirements in detail. For more information, visit: Quantum computing | CGI United States
Meet us at Quantum World Congress
CGI is proud to sponsor the upcoming Quantum World Congress event on September 23rd-25th in College Park, MD. For more information, visit: Quantum World Congress | CGI United States