# Federal Agencies Implement Post-Quantum Cryptography Requirements

Federal agencies are accelerating the adoption of post-quantum cryptography (PQC) standards starting in 2026, directly impacting federal contractors, defense industrial base subcontractors, technology vendors, and regulated industries. Key developments include agency-specific PQC migration plans, a proposed FAR Council rule mandating contractor compliance with quantum-safe cryptographic standards, and mandatory PQC requirements for National Security System acquisitions. These regulatory actions signal significant procurement and compliance shifts, requiring contractors to align with evolving quantum-resistant security protocols to maintain eligibility for federal contracts.

- **Contractors and subcontractors in the defense industrial base must prepare for mandatory PQC compliance as agencies integrate quantum-safe standards into acquisition requirements.**
- The FAR Council's proposed rule will formalize contractor obligations, making PQC adherence a critical factor in federal procurement evaluations.
- Agencies such as NIST, NSA, OMB, and ONCD are driving these initiatives, underscoring the federal government's commitment to quantum-resistant cybersecurity.
- Technology vendors should prioritize developing and certifying quantum-safe solutions to meet emerging federal standards and capitalize on procurement opportunities.
- Procurement professionals should update acquisition strategies and contract language to incorporate PQC requirements, ensuring alignment with federal mandates and reducing risk of non-compliance.

**Jurisdictions:** federal
**Industries:** Defense & Military, Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** September 21, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)
- Office of Management and Budget (OMB)
- Office of the National Cyber Director (ONCD)
- Federal Acquisition Regulatory Council (FAR Council)
- National Security Agency (NSA)

### Sources
- [Post-Quantum Cryptography: 2026 Requirements for Federal Contractors, Defense Industrial Base Subcontractors, Technology Vendors and Regulated Industries | Buchanan Ingersoll & Rooney PC](https://www.bipc.com/post-quantum-cryptography-2026-requirements-for-federal-contractors-defense-industrial-base-subcontractors-technology-vendors-and-regulated-industries) - Buchanan Ingersoll & Rooney PC