Priviso Live Episode 93: Quantum Deadline

🎙️ New Episode — Priviso Live 🎙️ Three stories landed this week that every information security and AI practitioner needs to understand. We cover all of them in this week's Priviso Live. ⚛️ THE QUANTUM CLOCK IS TICKING On 22 June 2026, US President Trump signed two executive orders mandating that federal agencies and their contractors migrate to Post-Quantum Cryptography (PQC) by 31 December 2030. That is four and a half years away. The projected US government-wide cost alone is $7.1 billion, and that estimate was built around a 2035 deadline. Large enterprises are looking at $10 million to $100 million just to transition their cryptographic infrastructure. The threat driving this is real: adversaries are stealing encrypted data today, banking on quantum computers being available in a few years to decrypt it. 'Harvest now, decrypt later' is not a theoretical risk. It is already happening. 💡 THE CHIP RENTAL LOOPHOLE NOBODY CLOSED US export controls restrict the sale of advanced AI chips to adversary nations. But they say nothing about renting access to those chips through American cloud providers. A new bipartisan bill, the Cloud Security Act, introduced on 26 June, would allow cloud providers to voluntarily report suspected misuse to the Department of Commerce. The lesson for every organisation: understand who your cloud provider is, and what their obligations are. Supply chain risk applies in the cloud too. 🤖 AI CAN HELP WITH YOUR AUDIT — UP TO A POINT A paper published on arXiv this week tested multi-agent AI systems against the German IT-Grundschutz standard: Europe's equivalent of ISO 27001. The finding? AI is excellent at the groundwork: asset mapping, structural analysis, documentation. But it struggles with the binary judgement calls that compliance demands. Probabilistic models and deterministic audits make uneasy partners. Valuable reading for anyone thinking about AI-assisted ISO 27001 or POPIA compliance work in South Africa. ▶️ Watch or listen now: Priviso Live is available on YouTube, Spotify, Apple Podcasts, iHeartRadio, and Samsung Podcasts. #PrivisoLive #InformationSecurity #PostQuantumCryptography #PQC #AIGovernance #CloudSecurity #ISO27001 #POPIA #Cybersecurity #SouthAfrica #ICTLegislation #QuantumComputing #ArtificialIntelligence #Compliance #DataProtection