No Neutral Primary-Source Figures Exist
Vendor surveys (Deloitte, IBM, Entrust, DigiCert) quote enterprise PQC migration costs in the hundreds of millions to multi-billions. These are vendor-authored estimates intended to drive engagement. No neutral primary source (NIST, NSA, CISA) has published a comparable number. Treat any "X billion per enterprise" figure with skepticism.
What Actually Costs Money
- Cryptographic inventory tooling ($50-500K): discovery platforms, scanning scripts, consulting engagements.
- Staff time (largest variable): PQC architect, crypto engineers, pilot testing, integration work. For a 1000-employee org typically 3-10 FTE-years over 3-5 years.
- HSM firmware upgrades ($10-500K per HSM): vendor-specific.
- Cloud KMS PQC features (usually included): AWS KMS, Azure Key Vault, Google Cloud KMS.
- Certificate authority costs: migration to hybrid or PQC certs, typically through existing CA relationships.
- Protocol testing and interop validation: QA time.
- Vendor migrations: contract renegotiations, potentially premium for vendors that have shipped PQC early.
- Training: internal engineering education.
A Realistic Budget Template
| Category | Small (100 emp) | Mid (1000 emp) | Large (10,000+ emp) |
|---|---|---|---|
| Inventory/discovery | $10-50K | $100-500K | $500K-5M |
| Staff time | 1-2 FTE-yr | 3-10 FTE-yr | 20-100 FTE-yr |
| HSM/infrastructure | $10-100K | $100K-1M | $1-10M |
| Vendor contract deltas | Minimal | $50-500K | $500K-5M |
| Training | $5-20K | $50-200K | $200K-2M |
| Total (approx) | $100-500K | $1-5M | $10-100M |
These are order-of-magnitude estimates; verify against your specific legacy crypto footprint.
Funding Sources
- Existing security budgets (CISO reallocation).
- Regulatory compliance budgets (especially for healthcare, finance).
- IT modernization grants (in some jurisdictions).
- Vendor-led migration programs (often partial subsidy).
What to Avoid
- Don't buy a dedicated "PQC appliance" as a silver bullet.
- Don't underestimate the vendor migration timeline.
- Don't over-pay for training; internal engineering plus liboqs documentation is sufficient for most needs.
Frequently Asked Questions
Will PQC migration cost my enterprise billions?
For the largest financial, defense, healthcare, or telecom enterprises, possibly. For a typical mid-sized enterprise, low millions. Most figures in circulation are vendor-marketing; treat them as directional.
Can I defer migration to reduce cost?
Deferring increases the HNDL-exposed window. The Mosca calculation already says migration should have started. Defer only if your data confidentiality lifetime is very short.
Are cloud providers charging extra for PQC?
Mostly not as of April 2026. AWS KMS, Azure Key Vault, Google Cloud KMS include PQC features in existing pricing. Specialty PQC HSMs may be priced at a premium.
How do I justify the budget to the board?
Frame it as regulatory compliance (NIST IR 8547, NSA CNSA 2.0, ENISA guidance) plus operational risk (HNDL). Avoid doomsday rhetoric; use the Mosca calculation with conservative assumptions.
Sources
Related Articles
Protect Your Data Before Q-Day Arrives
QNSQY's NIST-standardized post-quantum encryption protects files against both current and quantum-era threats.
Try QNSQYOriginally published at quantumsequrity.com/blog/pqc-migration-budget-planning.