PQC Migration for the Insurance Industry
Insurers sit on both sides of the quantum transition: they must migrate their own systems, and they must understand quantum risk well enough to underwrite it in others. Policyholder data has multi-decade sensitivity. Solvency II and NAIC model law compliance create regulatory obligations. And the questions insurers are asking on cyber insurance questionnaires are questions they need to be able to answer about their own infrastructure.
This course covers both dimensions: migrating the insurer’s own cryptographic estate and developing the quantum risk assessment competence needed for underwriting.
Who Should Take This Course
CISOs, CROs, and underwriting leaders at insurers and reinsurers. Also appropriate for insurance regulators, actuaries involved in cyber risk modeling, and InsurTech companies.
What You Will Learn
This course covers the quantum threat and PQC migration as it applies specifically to your sector, including sector-specific regulatory requirements, unique technical constraints, and practical migration strategies aligned with the PQC Migration Framework sector extensions.
Course Outline
Module 1 — Insurer Cryptographic Exposure
Policyholder data and the HNDL threat. Actuarial data sensitivity. Investment and financial data protection. The dual obligation: migrate your own systems and understand quantum risk for underwriting.
Module 2 — Quantum Risk Underwriting
How to assess an insured’s PQC readiness. Structuring cyber insurance questionnaires for quantum exposure. Pricing quantum risk. Policy language for PQC migration requirements. The timeline challenge: how to underwrite a risk whose magnitude depends on an uncertain technology timeline.
Module 3 — Regulatory Compliance
Solvency II implications. NAIC model law and state-level requirements. DORA for insurance entities. Supervisory expectations for quantum readiness.
Module 4 — Insurer Migration Strategy
Prioritizing the insurer’s own migration. Legacy system challenges in insurance IT. Managing migration across lines of business. Reinsurance implications.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you will receive a Quantum Academy certificate of completion. This is not a professional certification.