Post-Quantum Cryptography

Gartner Outlines Five Key CISO Actions to Counter AI and Quantum Computing Risks

Gartner has issued five specific recommendations for CISOs to address emerging threats from AI agents, deepfakes, and quantum computing risks. The guidance urges security leaders to embed AI governance, identity verification, and post-quantum cryptography preparation into enterprise strategy by the end of 2026. Key measures include clarifying responsibility for AI security, treating autonomous AI agents as insider threats, and rejecting voice or image recognition as sole proof of identity. CISOs are also advised to allocate budgets for preventive controls such as moving target defenses and honeypots while launching early pilot projects for post-quantum cryptography migration. Surveys cited by Gartner show that more than half of organizations still lack defined approaches for limiting AI agent access or have not started any PQC activities. The analyst firm warns that delaying PQC preparation until after 2027 could increase migration costs by at least 200 percent.