PQC Migration for the Insurance Industry
Insurers face the quantum transition twice. They have to migrate their own systems. They also have to understand quantum risk well enough to underwrite it in the businesses they insure. Policyholder data has multi-decade sensitivity. Insurers have regulatory obligations under Solvency II and NAIC model law. They should be able to answer the questions in their own cyber insurance questionnaires.
This course covers how to migrate the insurer’s own cryptographic estate and how to assess quantum risk when underwriting.
Course Outline
Module 1 Insurer Cryptographic Exposure
Policyholder data and the HNDL threat. Actuarial data sensitivity. Investment and financial data protection. The dual obligation: migrate your own systems and understand quantum risk for underwriting.
Module 2 Quantum Risk Underwriting
How to assess an insured’s PQC readiness. Structuring cyber insurance questionnaires for quantum exposure. Pricing quantum risk. Policy language for PQC migration requirements. The timeline challenge: how to underwrite a risk whose magnitude depends on an uncertain technology timeline.
Module 3 Regulatory Compliance
Solvency II implications. NAIC model law and state-level requirements. DORA for insurance entities. Supervisory expectations for quantum readiness.
Module 4 Insurer Migration Strategy
Prioritizing the insurer’s own migration. Legacy system challenges in insurance IT. Managing migration across lines of business. Reinsurance implications.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you receive a Quantum Academy certificate of completion. It is separate from our professional certifications and states your CPE credits, one for each 60 minutes of teaching. CISSP, CISM, CRISC and FRM holders can claim them with their certifying body. The credits also count toward renewing a Quantum Academy certification. Our CPE credits page explains how to claim them.
Who this course is for
Insurance CISOs and security architects, cyber underwriting leads, and actuarial and risk staff working on cyber exposure. It is for both the security side and the underwriting side.
If you only need the migration side, Quantum-Safe Financial Services covers it more directly.
What you’ll be able to do afterward
- Size harvest-now-decrypt-later exposure across policyholder, medical, and claims data
- Sequence migration across policy administration, claims, and reinsurer interfaces
- Frame the underwriting questions about quantum risk in a cyber book
- Evaluate a client’s post-quantum readiness claim critically during underwriting
- Brief a board or reinsurer on the institution’s readiness
What you leave with
When you finish, we email you the course handbook, a PDF of every slide with notes that explain it in full. We also include a PDF copy of Quantum Ready. The handbook is yours to keep.
Enrollment includes 180 days of access to the online on-demand course. Where that course is not yet published, the 180 days start on the day it is.
Where this course fits
Nothing is required. Post-Quantum Foundation covers the algorithm vocabulary if you want it first. The Quantum-Safe Insurance Intensive is the full-day private workshop on both migration and underwriting. Quantum-Safe Financial Services covers the wider regulatory context.
Why we teach this
The course is built on the Applied Quantum PQC Migration Framework. Its author, Marin Ivezic, is one of the practitioners who teach here. The framework is published openly under Creative Commons at pqcframework.org. The people who teach this course run migration programs inside organizations today. The course covers the problems they meet in that work.
About this program
Quantum Academy credentials are private professional credentials issued by Quantum Academy, a trade name of Post-Quantum Institute. They are not government-issued licenses, accredited degrees, or academic credit, and earning one does not guarantee employment, promotion, regulatory approval, or any other specific outcome.
Quantum Academy programs are educational and informational only, and are not legal, compliance, or engineering advice.