The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology have published a post-quantum cryptography toolkit for banks. It is designed to help institutions assign governance, assess cryptographic exposure, identify transition needs and monitor implementation. Practical tools cover asset and dependency inventories, transition priorities, supplier engagement and delivery timelines.
The toolkit follows the authority's Quantum Preparedness Index, launched in July. HKMA says the sector's initial score was 2.3 out of 10, indicating that transition work remained at an early stage. The stated ambition is a score of 10 by 2030. Those figures are the regulator's own maturity measure, not an independent assessment of every bank, but they provide a visible baseline and direction of travel.
For banking leaders, the value lies in treating cryptography as an estate and dependency problem rather than a simple algorithm swap. A migration plan must locate certificates, keys, protocols, applications, data-retention obligations and third-party services before sequencing change. The threat timing remains uncertain, as the source acknowledges, but inventory, ownership and supplier questions can be addressed now without pretending that every technical choice is settled.
