Hong Kong Banks Score 2.3/10 on Quantum Readiness: HKMA Sets 2030 Deadline

Hong Kong's banking sector is just beginning to confront what may be the most significant cybersecurity challenge of the coming decade: the threat quantum computing poses to current encryption standards. The Hong Kong Monetary Authority (HKMA) has taken a public, data-driven approach to assessing this risk, publishing its first Quantum Preparedness Index (QPI) in July 2026. The results show an industry that has a long way to go, with the regulator setting a firm 2030 deadline for full readiness.

What is the Quantum Preparedness Index (QPI)?

The Quantum Preparedness Index is a 10-point benchmark designed by the HKMA to measure the banking sector's maturity in adopting post-quantum cryptography (PQC) and preparing for quantum computing risks . It is the first index of its kind for the Hong Kong banking sector, introduced at the FiNETech8 event alongside a whitepaper on quantum preparedness .

The QPI assesses banks across four key dimensions :

• Awareness: Understanding of quantum computing threats and their impact on current cryptographic systems.
• Planning: Existence of formal strategies, roadmaps, and resource allocation for post-quantum transitions.
• Pilots: Active pilot projects or proof-of-concepts testing PQC solutions.
• Practical Preparedness: Operational readiness, including cryptographic inventory management and migration plans.

The index was based on a survey conducted earlier in 2026, giving the regulator a baseline snapshot of the industry's posture .

The Score: 2.3 Out of 10

The sector's overall QPI score stands at 2.3 out of 10, a figure that the HKMA itself describes as reflecting an early stage of preparedness . This score indicates that most banks are still "laying the foundation for the quantum era," focusing primarily on building basic awareness rather than executing concrete migration plans .

A more alarming finding underscores the scale of the challenge: roughly half of the surveyed institutions reported having no formal post-quantum planning in place at all . This means a significant portion of Hong Kong's banking infrastructure has not yet begun to inventory its cryptographic assets, let alone plan for their replacement.

The Target: Full Readiness by 2030

The HKMA has set a clear sectoral goal: achieve a QPI score of 10 — defined as "full sectoral readiness" — by 2030 . This gives Hong Kong's banks roughly four years from the index's launch to overhaul their cryptographic infrastructure.

The HKMA has stated it will support the banking sector throughout this transition through practical guidance, training, and industry engagement . This includes the development of toolkits, workshops, and coordinated industry guidance .

However, the regulator has not published interim targets or specific legal deadlines for individual lenders. The 2030 target is described as a sectoral objective that the HKMA will track through regular QPI assessments .

Why Quantum Readiness Matters Now

The urgency behind the HKMA's initiative is rooted in the fundamental threat quantum computing poses to public-key cryptography — the encryption that secures everything from online banking transactions to digital signatures. A sufficiently powerful quantum computer could theoretically break widely used encryption algorithms, potentially exposing sensitive financial data and undermining trust in the financial system.

Hong Kong's push for quantum readiness is also intertwined with its broader ambitions in digital finance. The city is actively expanding tokenized finance and digital asset markets, which rely heavily on cryptographic security. The HKMA's whitepaper on quantum preparedness was released in direct connection with this expansion, highlighting the need to secure future financial infrastructure against quantum risks .

A Global Regulatory Trend

The HKMA is not alone in focusing on post-quantum cryptography. Central banks and financial regulators worldwide are beginning to assess the threat and urge early action. The QPI provides Hong Kong with a measurable, transparent benchmark to track progress, which could serve as a model for other jurisdictions.

The initial score of 2.3/10 is a sobering but honest starting point. The key question now is whether Hong Kong's banking sector can accelerate its quantum preparedness fast enough to meet the 2030 deadline — before the arrival of cryptographically relevant quantum computers makes the transition a crisis rather than a planned evolution.