Kuala lumpur: Malaysia has emerged as the only ASEAN country ranked at the highest level, Tier 1, for Post-Quantum Cryptography (PQC) migration readiness, according to the ASEAN Post-Quantum Cryptography Readiness 2026: An Empirical Assessment of the ASEAN-10 report published on Sept 1.
According to BERNAMA News Agency, the National Security Council (NSC) stated that this achievement reflects Malaysia's successful development and active implementation of PQC migration programs. "This assessment is based on verifiable national-level actions and implementation, rather than merely relying on statements of intent or a country's technological advancement," it mentioned in a statement.
The report was published by SITG-Consulting, a United Kingdom-based advisory firm specializing in cyber risk, cryptography governance, organizational resilience, and PQC readiness. It placed Brunei, Cambodia, Indonesia, Singapore, Thailand, and Vietnam in Tier 2; the Philippines in Tier 3; Laos in Tier 4; and Myanmar in Tier 5.
NSC highlighted that PQC readiness is a strategic initiative under the MADANI Government to ensure that data, systems, and National Critical Information Infrastructure (NCII) remain secure and resilient against threats posed by quantum computing. "This early preparation enables a planned transition to strengthen the security of government data and information, financial transactions, digital identities, communications, and the continuity of critical national services," it said.
The council emphasized that the initiative is supported by several national programs and policies, including the Malaysia Cyber Security Strategy 2025-2030, National Cryptography Policy, MyCryptography Action Plan 2026-2030, National Cyber Security Agency Chief Executive Directive No. 9, and National PQC Migration Plan. It added that the government is also implementing the PQC Proof-of-Concept Programme through the National PQC Migration Plan Sandbox Initiative, as well as a PQC migration awareness programme for NCII entities.
To address future technological challenges, NSC affirmed that the government remains committed to strengthening the implementation of the National PQC Migration Plan to ensure that NCII remains secure, resilient, and sovereign. "This measure requires continuous collaboration with NCII sector leads, NCII entities, and industry players through the preparation of cryptographic asset inventories, risk assessments, capacity building, technology testing, and phased migration implementation as planned," it said.