Introduction
In our previous post, Preparing for the Quantum Secure Future: The Time Is Now, we explored why the quantum era represents both a transformative opportunity and an urgent cybersecurity challenge. The message was clear: organisations and governments cannot wait until cryptographically relevant quantum computers arrive. The time to act is now.
Since then, attention has increasingly turned to how nations are embedding quantum security into their broader digital and cybersecurity strategies. While Europe and North America have launched ambitious initiatives to accelerate the shift to quantum-safe devices, a quieter but equally significant development is emerging in Latin America. Uruguay has taken an important step forward with its Estrategia Nacional de Ciberseguridad 2024–2030 – one of the first strategies in the region to explicitly recognise the risks posed by quantum technologies and to outline a path toward resilience.
This is more than a regional milestone. It signals a broader global shift: quantum security is no longer the preserve of research labs and technical communities. It is entering national policies, digital transformation agendas, and international cooperation frameworks. By looking at Uruguay’s approach alongside developments in Europe, North America, and Asia, we can see how momentum is building and why it is essential to accelerate it.
Uruguay: Taking the Lead in Latin America
In December 2023, Uruguay adopted its National Cybersecurity Strategy 2024–2030, making it one of the first countries in Latin America to explicitly address the risks of quantum technologies. Far from a passing reference, the strategy sets out concrete measures that bring quantum resilience into the core of national digital policy.
A central element is the protection of critical information infrastructures. The government recognises that these systems will be among the first to feel the impact when quantum computers capable of breaking current encryption become available. To anticipate that threat, Uruguay has included the transition to post-quantum cryptography as part of its 2024–2030 national cybersecurity roadmap. This transition is supported by enhanced monitoring and detection capabilities, specialised cybersecurity teams, and the provision of contingency funds, with the goal of ensuring that resources are available to address systemic risks.
Perhaps the most ambitious step is the decision to design a quantum-resistant national Public Key Infrastructure (PKI). Unlike existing systems, this next-generation PKI will be built around post-quantum algorithms from the outset, aligned with international standards, and developed in collaboration with the private sector. By making this a national project, Uruguay is signalling its intent to protect the integrity of digital identity, authentication, and secure communication for the long term.
The strategy also highlights the importance of emerging technologies beyond cryptography. Artificial intelligence and quantum computing themselves are framed as part of the solution, with research and innovation encouraged through close cooperation between government, academia, and industry. This positions Uruguay not just as a consumer of global technologies, but as an active participant in developing them.
To ensure that the plan delivers results, the strategy establishes a national action plan with clear responsibilities, milestones, and key performance indicators. Progress will be evaluated through a public monitoring tool, offering transparency and accountability. International engagement is also built into the framework, as Uruguay commits to advancing cybersecurity and quantum resilience through bilateral and multilateral cooperation.
In summary, Uruguay’s strategy sets out three particularly noteworthy commitments:
- A national transition plan for post-quantum cryptography in critical infrastructures.
- The creation of a quantum-resistant PKI built to international standards.
- Investment in research and innovation in emerging technologies, including AI and quantum computing.
By embedding these priorities into its broader cybersecurity agenda, Uruguay is positioning itself as a pioneer in the region. The message is clear: for Uruguay, the quantum threat is not a distant possibility but an immediate challenge that demands action today.
Latin America: Building Regional Momentum
While Uruguay has taken the clearest step so far, others in the region are beginning to prepare the ground.
Brazil, for example, has one of the strongest scientific communities in quantum research outside of Europe and North America. Its universities and research centres are actively developing applications in quantum cryptography and communications, and while the country’s current cybersecurity strategy does not yet explicitly reference quantum threats, the building blocks are there. If linked more directly to national security and digital policy, Brazil’s research base could quickly become a springboard for regional leadership.
In Chile, last year report by the National Quantum Technologies Advisory Commission — Recommendations and Challenges for Strengthening the Quantum Ecosystem in Chile (2024) — calls for a national strategy to align research, infrastructure, and public–private collaboration. Notably, it includes guidelines for transitioning to quantum-safe technologies and developing domestic capabilities in post-quantum cryptography, placing Chile on a clear path toward integrating quantum security into its digital policies
Argentina is also moving forward with modernising their cybersecurity strategies and institutional frameworks. Although still at the stage of strengthening legal capacity and organisational readiness, these reforms create the conditions under which post-quantum measures can be introduced. Academic institutions are already exploring aspects of quantum information science, which could translate into policy priorities in the years ahead.
Regional organisations such as the Organization of American States (OAS) and the Inter-American Development Bank (IDB) play an important role in this landscape. Their long-standing support for cybersecurity capacity building across the region increasingly touches on quantum issues, particularly the urgent challenge of “crypto migration.” As these organisations raise awareness and provide technical assistance, they can accelerate the spread of post-quantum readiness beyond early movers like Uruguay.
The takeaway is that Latin America is entering a preparatory phase. Uruguay has brought quantum security explicitly onto the agenda, and others are likely to follow as awareness spreads and international cooperation deepens.
Europe: From Research to Regulation
Europe has emerged as a leader in quantum security, combining large-scale research with binding regulatory commitments.
On the research side, initiatives such as the €1 billion Quantum Flagship and the European Quantum Communication Infrastructure (EuroQCI) are funding innovation and deploying secure networks. National governments are also active. Germany is investing in PQC and communications, France has embedded secure communication in its national quantum strategy, and the Netherlands is piloting public–private quantum-safe networks.
At the regulatory level, the EU has moved beyond research to mandate action. In 2025 it adopted a coordinated roadmap for post-quantum cryptography, requiring Member States to publish migration plans by 2026 and ensure critical infrastructures operate with quantum-resistant encryption by 2030.
Looking ahead, a proposed “Quantum Act” (expected in 2026) will regulate supply chains, protect strategic research, and attract private investment. Germany is also piloting a dedicated national fibre-optic infrastructure (the “QTF-Backbone”) for secure quantum signals and time synchronisation.
Europe’s message is clear: quantum resilience is a matter of digital sovereignty and national security.
North America: Mandates and Migration Plans
North America is advancing rapidly, with a strong focus on standards, federal mandates, and coordinated action.
In the United States, quantum security has risen to the top of the policy agenda. Recent milestones include:
- Executive Order 14144 (January 2025): Mandating that federal agencies adopt PQC-ready systems and report progress regularly.
- CISA Post-Quantum Cryptography Initiative: Coordinating migration across critical infrastructure.
- Legislative proposals: The National Quantum Cybersecurity Migration Strategy Act would formalise a nationwide roadmap.
These efforts complement NIST’s work on PQC standards and the NSA’s CNSA 2.0 suite, which already guides deployments in national security systems.
Canada has aligned its National Quantum Strategy (2024) with its National Cybersecurity Strategy (2025). Together, they prioritise:
- Migration roadmaps for government IT between 2025 and 2035.
- Investment in quantum communications and cryptography research, supported by academia–industry partnerships.
- Annual reporting to ensure accountability.
Together, the U.S. and Canada show how PQC is moving from research into standards, and from standards into enforceable government policy.
Asia: Emerging Missions and Early Implementation
Asia is also stepping into the quantum security arena, though with a stronger emphasis on research programs and national missions than on binding regulations.
China has taken a dual approach, investing heavily in nationwide QKD networks while developing domestic PQC standards. Quantum technologies are embedded in its Five-Year Plans, reflecting their status as a strategic national priority.
India launched its National Quantum Mission (2023–2030/31), which aims to build capacity across computing, communications, and cryptography. By establishing hubs and technical groups dedicated to quantum R&D, India is positioning itself as a regional powerhouse in the field.
Singapore is perhaps the most advanced in Southeast Asia. Its National Quantum-Safe Network Plus (NQSN+), part of the Digital Connectivity Blueprint, is deploying quantum-safe communications nationwide. The city-state also contributes actively to international standard-setting through the International Telecommunication Union (ITU), ensuring that its domestic initiatives are aligned with global practices.
Vietnam has established a National Quantum Technology Network, while other ASEAN countries such as Malaysia, Thailand, and Indonesia are building pilot programs and public–private research partnerships. These efforts are still at an early stage but signal growing awareness of the need for quantum security.
While Asia’s initiatives vary in maturity, the region is investing heavily and collaborating across borders. As these programs evolve, they are likely to accelerate quickly, reshaping the global balance in quantum technology development and deployment.
Building Global Momentum
The global picture reveals a striking asymmetry:
- Europe and North America are already operationalising quantum-safe initiatives.
- Latin America, led by Uruguay, is beginning to integrate quantum security into digital strategies.
- Asia is laying the foundations through missions, research, and early deployments.
What ties these regions together is the recognition that the quantum threat is real. The phrase “harvest now, decrypt later” remains a powerful reminder: data stolen today could be decrypted tomorrow. Uruguay’s leadership in Latin America should serve both as an example and as a call to action. If one of the region’s smaller nations can embed post-quantum planning into its cybersecurity roadmap, larger economies should not stay behind.
Conclusion: The Time to Act
Quantum security is no longer a futuristic concept. It is a matter of national strategy. Uruguay’s 2024–2030 National Cybersecurity Strategy demonstrates that even smaller nations can lead by example, explicitly preparing for post-quantum cryptography and quantum-resistant infrastructures.
Other countries, especially in Latin America, should take note. The EU and North America are moving decisively, while Asia is mobilising through ambitious national missions. To remain secure and competitive, every nation must begin planning its post-quantum transition.
For organisations, this means conducting quantum risk assessments, building cryptographic inventories, and ensuring crypto-agility. For governments, it means embedding quantum security into strategies, regulations, and digital policies. For professionals, it means acquiring the knowledge and skills to lead the transition.
At QURECA, we believe education is the foundation of resilience. As Uruguay’s example shows, preparing for the post-quantum world is not optional—it is urgent. The time to act is now.