MAS Wants Singapore’s Financial Sector Quantum-Safe by 2034

Singapore's financial regulator, MAS, is moving to prepare the sector for the potential emergence of powerful quantum computers. These advanced machines could, in time, compromise current public-key cryptographic algorithms, which are fundamental to securing digital financial transactions and sensitive data. While the exact timeline for this threat is uncertain, MAS notes it could materialize within the next few years, prompting the need for a phased migration to quantum-safe systems.

The proposed guidance establishes differentiated timelines based on an institution's operational criticality. All financial institutions are generally expected to develop migration plans by December 2027 and transition remaining systems by December 2034. However, earlier and more stringent deadlines apply to Critical Information Infrastructure Owners (CIIOs), Domestic Systemically Important Banks (DSIBs), and NETS. These critical entities must submit plans by June 2027, with CIIOs specifically completing migration of their critical information infrastructure systems by December 2029. This tiered approach suggests MAS is prioritizing entities with systemic importance and critical operational roles for earlier compliance, reflecting a risk-based strategy.

MAS's proposal includes practical expectations for firms, such as identifying vulnerable systems, securing senior management oversight, allocating sufficient resources, and accounting for third-party vendors in their migration plans. Institutions are also expected to test quantum-safe solutions before deployment and introduce interim safeguards if immediate upgrades are not feasible. MAS has clarified that these are proposed guidelines, not legally binding obligations, and the timelines may adjust as quantum threats and cryptographic standards continue to evolve.