The neighbouring anchor · Germany and the EU
Germany has put dates on it too: inventory by end 2026, high-risk systems by 2030
In September 2026, Germany’s interior and digital ministries and the BSI issued a joint guideline that adopts the EU Coordinated Implementation Roadmap for the transition to post-quantum cryptography. It addresses public administration, critical-infrastructure operators, and companies, and sets the same three milestones for Germany that the EU set for its member states. Not Swiss law — but the reference every Swiss institution with German or EU entities, and every EU-based service provider, will be measured against:
PQC readiness: planning done, initial cryptographic inventory complete
Crypto inventory and dependency map in place, first migration steps started (§4.3)
high-risk use cases migrated to quantum-safe cryptography
Priority set by attackability, damage extent, and migration effort (§4.5)
medium-risk use cases migrated; transition largely complete
As many systems as possible; hybrid schemes recommended throughout (§4.4)
The guideline’s six steps — binding deadlines, a responsible body, cryptographic inventory, PQC as state of the art, quantum-risk scoring inside regular risk management, and the supply chain — are the dimensions the PQC Navigator assesses.
Source: “Nationale Umsetzung der EU-Roadmap zur Umstellung auf Post-Quanten-Kryptografie – Gemeinsame Leitlinie von BMDS, BMI und BSI”, 11 September 2026 (German). The deadlines are urgent recommendations, to be made binding by the responsible bodies; the guideline is not a Swiss requirement.
Read the BSI guideline (PDF, German) →
