FINMA Quantum Guidance Puts a Mid-2027 Date on Swiss PQC Roadmaps


Table of ContentsA Sector That Sees the Risk and Hasn’t MovedFive Recommendations Inside the FINMA Quantum GuidanceMy AnalysisA Deadline Without a Single New RuleThe Sector’s Own Numbers Don’t CloseHNDL Cuts Deeper in SwitzerlandThe Sharpest Tooth Is a Contract ClauseHybrid In, QKD Out, and One TypoMid-2027 Against Everyone Else’s Clock
July 9, 2026 — The Swiss Financial Market Supervisory Authority (FINMA) published FINMA Guidance 05/2026 on quantum computing, an eight-page supervisory communication that pairs the results of a sector survey with recommendations for the migration to quantum-safe cryptography. The central recommendation: supervised institutions should have a post-quantum cryptography (PQC) roadmap in place by mid-2027 at the latest.
The FINMA quantum guidance draws on a survey of 60 licensed banks, insurance companies, managers of collective assets, and financial market infrastructures that FINMA conducted between November 2025 and January 2026. The regulator’s summary: Swiss institutions are aware of the cyber risks posed by cryptographically relevant quantum computers (CRQCs), but most lack a clear roadmap and sufficiently forward-looking planning for the move to quantum-safe encryption.
FINMA frames the subject within existing law. Switzerland’s technology-neutral, principles-based requirements for governance and risk management already cover the risks arising from powerful quantum computers, it argues, and many institutions would need to develop their risk management further to stay compliant with the requirements on operational risk and resilience. The bottom line for the sector: quantum readiness in Switzerland now comes with a date attached. FINMA recommends a board-adopted PQC strategy and roadmap by mid-2027 at the latest, and says it will give the topic greater prominence in its ongoing supervisory activities.
A Sector That Sees the Risk and Hasn’t Moved
The awareness numbers are unambiguous. Sixty-nine percent of su…