PQC Migration for the Insurance Industry
Insurers face the quantum transition twice. They have to migrate their own systems, and they have to understand quantum risk well enough to underwrite it in others. Policyholder data has multi-decade sensitivity. Solvency II and NAIC model law compliance create regulatory obligations. And the questions insurers are asking on cyber insurance questionnaires are questions they need to be able to answer about their own infrastructure.
This course covers both dimensions: migrating the insurer’s own cryptographic estate and developing the quantum risk assessment competence needed for underwriting.
Course Outline
Module 1. Insurer Cryptographic Exposure
Policyholder data and the HNDL threat. Actuarial data sensitivity. Investment and financial data protection. The dual obligation: migrate your own systems and understand quantum risk for underwriting.
Module 2. Quantum Risk Underwriting
How to assess an insured’s PQC readiness. Structuring cyber insurance questionnaires for quantum exposure. Pricing quantum risk. Policy language for PQC migration requirements. The timeline challenge: how to underwrite a risk whose magnitude depends on an uncertain technology timeline.
Module 3. Regulatory Compliance
Solvency II implications. NAIC model law and state-level requirements. DORA for insurance entities. Supervisory expectations for quantum readiness.
Module 4. Insurer Migration Strategy
Prioritizing the insurer’s own migration. Legacy system challenges in insurance IT. Managing migration across lines of business. Reinsurance implications.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you will receive a Quantum Academy certificate of completion. This is not a professional certification.
Who this course is for
Insurance CISOs and security architects, cyber underwriting leads, and actuarial and risk staff working on cyber exposure. Insurers face this transition from two directions at once.
If you only need the migration side and not the underwriting side, Quantum-Safe Financial Services covers it more directly.
What you’ll be able to do afterward
- Size harvest-now-decrypt-later exposure across policyholder, medical, and claims data
- Sequence migration across policy administration, claims, and reinsurer interfaces
- Frame the underwriting question quantum risk poses for a cyber book
- Read a client’s post-quantum readiness claim critically during underwriting
- Brief a board or reinsurer on where the institution stands
What you leave with
You leave with the course handbook, a PDF of the full material with the instructor notes written out in place of the slides’ bullet points, and a PDF copy of Quantum Ready, included at no extra cost. The handbook is yours to keep. For most organizations, that shared reference is the clearest return on a training budget.
Enrollment includes 180 days of access to the online on-demand course. Where that course is not yet published, the 180 days start on the day it is.
Where this course fits
Nothing is required. Post-Quantum Foundation covers the algorithm vocabulary if you want it first. The Quantum-Safe Insurance Intensive is the private working session covering both migration and underwriting. Quantum-Safe Financial Services for the wider regulatory frame.
Why we teach this
The course is built on the Applied Quantum PQC Migration Framework, published openly under Creative Commons at pqcframework.org and written by the practitioners who teach here. The people who teach this course are running migration programs inside organizations now, and the course covers what those programs hit.
About this program
Quantum Academy credentials are private professional credentials issued by Quantum Academy, a trade name of Post-Quantum Institute. They are not government-issued licenses, accredited degrees, or academic credit, and earning one does not guarantee employment, promotion, regulatory approval, or any other specific outcome.
Quantum Academy programs are educational and informational only, and are not legal, compliance, or engineering advice.