Advancing Post-Quantum Cryptography to Protect One of the Nation’s Largest Healthcare Systems

Challenge

Protecting Health and Benefits Data in the Age of Quantum Computing

A federal health agency operates one of the largest healthcare systems in the United States, delivering care and benefits to millions of individuals each year. Supporting that mission requires securing vast amounts of sensitive health, financial, and personal data across a complex and highly distributed IT environment.

As cybersecurity threats evolve, agencies must continually strengthen the systems that protect that information. One emerging concern is the future impact of quantum computing on today’s encryption methods, which could eventually make widely used cryptographic protections vulnerable.

Recognizing this risk, federal policy now directs agencies to begin preparing for the transition to post-quantum cryptography (PQC). For the agency, this meant identifying cryptographic dependencies across thousands of systems, coordinating teams across the enterprise, and developing a structured roadmap to transition to quantum-resistant security while maintaining the reliability of services users rely on every day.

Solution

Building the Foundation for a Transition to Post-Quantum Cryptography

The agency engaged Revolutional to support its transition to post-quantum cryptography. Revolutional applied its structured approach for identifying, evaluating, and prioritizing cryptographic dependencies across enterprise systems, developing the roadmap and technical foundation for the transition to PQC.

Working with cybersecurity and technology leaders, the team established the structure, governance, and technical roadmap needed to prepare systems for quantum-resistant encryption.

The work included establishing an enterprise inventory of systems that rely on public-key cryptography, with 675 systems inventoried for post-quantum cryptography readiness, while identifying high-value assets, mission systems, and environments where hidden cryptographic dependencies may exist.

Revolutional also coordinated stakeholders across the enterprise through a PQC working group that brought together cybersecurity teams, system administrators, and business leaders to align priorities and share visibility into cryptographic risk. In parallel, the team engaged technology vendors and suppliers to incorporate quantum-resistant requirements into vendor communications, contract language, and supply chain risk management practices, while developing cost projections that accounted for technology replacement, workforce training, and potential operational impacts during the transition.

Impact

Positioning the Organization for a Secure Transition to Quantum-Resistant Encryption

These foundational efforts established the structure of the organization’s post-quantum cryptography program and positioned it to begin an orderly transition to quantum-resistant security standards.

By developing governance frameworks, conducting cryptographic inventories, and establishing vendor coordination processes, the program provides the organization with the tools and visibility needed to identify vulnerable systems and plan for the migration to PQC across its enterprise environment.

These early efforts are helping the organization prepare for the coming era of quantum computing while strengthening the long-term security of the systems that support care and services for millions of individuals.