Louise Davey, President of LDIQ and author of Quantum How, joins the show to discuss why the transition to post-quantum cryptography is fundamentally a challenge of organizational governance rather than just a technical upgrade. Drawing on her unique perspective as a former experimental nuclear physicist, she explains how leaders can translate complex technical threats into the business language of risk and resilience. This episode provides a roadmap for executives to bridge the gap between technical practitioners and executive leadership to ensure long-term viability.
Most organizations currently view the arrival of a cryptanalytically relevant quantum computer as a distant technical concern, but Louise Davey argues that it is a present-day governance crisis requiring immediate board-level action. In this episode, she explores how technical practitioners can successfully carry this issue to the top of an organization by moving the conversation away from qubits and toward fiduciary duty and operational resilience. Louise highlights the unique timing offset inherent in the "harvest now, decrypt later" threat, which complicates traditional risk management because the decisions made today affect a security landscape that will manifest long after current leaders have moved on.
The discussion further examines the three primary breakages that quantum computing causes in standard risk models, specifically regarding ownership, remediation, and the foundational assumptions of digital trust. Louise points out that many organizations fail by treating the quantum transition as an IT project. She clarifies that while IT is an essential enabler for execution, the business must own the strategy and accountability to ensure multi-year programs receive the necessary budget and sustained focus. When the strategy lacks business-led ownership, it risks stalling during the long slog of defending the program through various political complexities.
The discussion concludes with actionable advice for boards to move from awareness to execution through expert advisory and rapid risk assessments. Louise explains the incredible power of an inquiring board to shift organizational priorities overnight. By asking the right questions and recording them in meeting minutes, boards can transform a slow-moving technical initiative into a high-priority mandate for organizational resilience.
What you’ll learn
- How to translate technical quantum risks into the language of business.
- Why the timing offset makes quantum risk different from traditional cyber threats.
- The three primary breakages in standard risk management caused by quantum computing.
- Why IT should be the executor rather than the owner of a transformation.
- The importance of a business-led steering committee for accountability.
- The first practical steps boards can take to begin the transition.
About Louise Davey
Louise Davey is the president of LDIQ and an expert in quantum readiness and post-quantum cryptography. She is the author of Quantum How, a guide for leadership in the quantum era, and brings a unique perspective as a former experimental nuclear physicist who transitioned into business leadership.
Your roadmap to quantum resilience
[01:14] Step 1: Connect physics with business dynamics
Louise shares how her background in experimental nuclear physics helped her understand the structural dynamics of large organizations. She discusses the transition from laboratory research to the business world and how these two fields intersect in the quantum era.
Key Question: Is your leadership team viewing quantum readiness through a scientific lens or a business lens?
[08:37] Step 2: Reframe the conversation for the boardroom
Technical practitioners often focus on qubits and algorithms, but these concepts can lose the attention of executive leadership. Louise explains how to shift the dialogue toward operational resilience and the potential impacts on an organization’s long-term viability.
Key Question: How can you translate cryptographic vulnerabilities into measurable business impacts like reputation and compliance?
[15:30] Step 3: Address the timing offset and digital trust
The risk of harvest now, decrypt later means that the actions taken today affect the security of the organization in the future. Louise describes how this dynamic invalidates current assumptions about digital trust and identity.
Key Question: Does your current risk management framework account for threats that will manifest long after the initial data harvest?
[23:08] Step 4: Establish business ownership of the transformation
A common failure mode in large transformations is the assumption that IT should lead the initiative. Louise emphasizes that IT is an enabler and that the strategy must be driven by business leadership through structured committees.
Key Question: Who in the business is presiding over the committee that is accountable for your quantum transition?
[37:00] Step 5: Move from awareness to actionable advisory
The final step involves securing expert guidance to educate the board and senior executive teams. Louise outlines the importance of performing a rapid risk assessment to ensure the organization is directionally correct from the start.
Key Question: Has your board been equipped with the right questions to challenge the information they receive about quantum risk?
Episode resources
Want exclusive insights on quantum migration? Stay ahead of the curve. Subscribe to Shielded: The Last Line of Cyber Defense on Apple Podcasts, Spotify, or YouTube Podcasts.
✔ Get insider knowledge from leading cybersecurity experts.
✔ Learn practical steps to future-proof your organization.
✔ Stay updated on regulatory changes and industry trends.
Need help subscribing? Click
here for step-by-step instructions.