United States
United States
United States
India
The age of quantum computing is fast approaching, and the financial services industry should prepare now. Increased capital investments and patent filings for hardware technology indicates spending on quantum-related capabilities will likely grow quickly over the next few years.1 Globally, the financial services industry’s spending on quantum computing capabilities is expected to grow 233x from just US$80 million in 2022 to US$19 billion in 2032, growing at a 10-year CAGR of 72% (figure 1).2 Firms that are working on developing quantum-related capabilities now could enjoy a competitive advantage as these capabilities mature.
Quantum computers are expected to radically enhance computational capabilities for complex mathematical operations, such as financial simulation and modeling.3 They could also pose a risk to cybersecurity.4 This risk arises from their potential ability to implement an algorithm developed in 1994 by Peter Shor (Shor’s algorithm), which would render a lot of current-day cryptography obsolete.5 Although the timeline for such an attack to be mounted is uncertain, the need to mitigate the cybersecurity risk is so significant that the time to act is now.
On the software and services side, two factors are driving rapid adoption: increased demand due to quantum cybersecurity vulnerabilities, and the coalescence of entrepreneurial firms with point solutions that, in aggregate, provide a comprehensive mosaic of cybersecurity services. These groups are guided by solution aggregators that identify emerging technologies and guide entrepreneurs in their collaboration efforts.6 The point of this process is to harness emerging technologies to help provide broad solutions while mitigating the risks normally associated with implementing leading-edge technologies.
As technology develops and vulnerabilities grow, adoption of quantum computing-focused technologies will likely increase dramatically. On the growth side of the coin, there may be less urgency, but some firms are preparing nonetheless to generate revenue and delight customers with quantum computing enabled capabilities. But before those goals can be achieved, firm leaders may need to play defense—as with more power can come more threats.
FSIs' defensive spending in regard to quantum computing over the next few years is expected to focus on mitigating quantum-computer powered cybersecurity attacks. Data is important to industries such as financial services that handle large amounts of monetary transactions and maintain a record of vast volumes of sensitive client information. FSIs will likely be the primary target for quantum computer cyberattacks and data breaches. Industry vendors warn that quantum computers, when commercially available over the next couple of years, will likely be able to break public key encryptions, which secures 90% of all global encrypted data.7 In fact, in the United States, a single quantum attack that disrupts access to the Fedwire Funds Service payment system for one of the five largest financial institutions would lead to cascading financial failures impacting the US GDP to the tune of US$2.0–$3.3 trillion.8 Some hackers are even harvesting encrypted data now with the intention of decrypting the data retroactively using a commercially available quantum computer, making this cybersecurity threat a current, not future, problem.9
Some firms are preparing to counter the potential threats that quantum computers bring. Postquantum Cryptography (PQC) has been in development for several years.10 PQCs are new quantum-resistant cybersecurity techniques that will have to be deployed to secure data and transactions in the future. One such emerging quantum-resistant technology uses a blockchain approach to encrypt data at the record level with a hardware-enhanced, postquantum cryptography-secure key for each data element. The innovation in this approach is twofold. First, data is secure inside the perimeter, rather than being another fence around unsecure data elements. Second, with the blockchain approach, the data and its administrative records are immutable, and tampering is traceable.11 PQC will likely emerge with capabilities to mitigate risk based on new, government-approved techniques, coupled with novel approaches.12
When the National Institute of Standards and Technology postquantum cryptographic standards are finalized and published for use in 2024, this could serve as the foundation for a regulatory push toward quantum-resistant cryptography in the financial services industry.13 With the upgrade from current cryptography to quantum-resistant cryptography, all current sensitive information may have to be reencrypted and cryptography algorithms upgraded to be quantum-resistant. The new setup will likely require significant investment in hardware, software, communications, and infrastructure. Investment in system upgrades and regulatory compliance will likely drive the quantum-resistant cryptography market for the financial services industry over the next 10 years.
“If you accept that there is a finite probability that a quantum computer capable of breaking asymmetric cryptography will exist, say within the next ten years, how long will it take you to upgrade your cryptographic infrastructure, and what is the expected lifetime of your data? If you do not yet know the answers to these questions, the time to act is now! Once you know these answers, you can start to prioritize your efforts and be better prepared once standards are finalized.”
—Colin Soutar, Managing Director, Deloitte & Touche LLP
Financial services firms are also using quantum computing to get ahead. These offensive use cases include Monte Carlo simulations, portfolio optimization, risk minimization, and complex derivative calculations.14 Quantum computers may also be used to improve the ability of AI to derive useful information from large volumes of data.15 Firms can also leverage the power of quantum computers to elevate the customer experience by processing customer inputs and behavior to predict their needs in near real-time.16
FSIs’ spending on quantum computing offensive use cases is lagging defensive spending because full-scale quantum computers are not commercially available as of mid-2023.17 Even so, spending on quantum technologies such as quantum annealers, for specific use cases, has started at firms that have made the strategic choice to be leaders in quantum computing. These firms are expected to switch to more powerful quantum computing hardware when it becomes commercially available.
Exploiting the advantages of quantum computing requires different expertise than what is learned through programming and architecting traditional IT systems.18 For this reason, a few FSIs, among them Goldman Sachs, JPMorgan Chase, HSBC, and Barclays, have formed teams to figure out the problems they want to address with quantum computers and programming solutions to be effective in a quantum computing platform.19 Quantum computing capabilities can help organizations to create an information advantage over competing FSIs that can be sustained for at least the initial phase of quantum computing adoption, which may last several years.
If quantum computing reaches mass adoption in the early 2030s as expected, the information advantage will likely shift to information parity. However, the quantum capability will be no less valuable. It will likely become a necessity for at least a few areas of operation, where speed and comprehensiveness contribute to the value of business process optimization.
Firms that plan to be early movers on the offensive side will likely have to start exploring and experimenting with the potential use cases of quantum computing. On the defensive side, firms can start by inventorying their data and systems for the upcoming transition to postquantum cryptographic standards. With the combination of urgency and opportunity, quantum spending in FSIs has already begun and spending will likely accelerate for at least the next 10 years. At some point in the future, we may even see a time when quantum computing is the norm, and it is just called “computing.”
Doug Dannemiller, Krissy Davis, Julia Cloud, and Tony Gaughan, 2023 investment management outlook, Deloitte Insights, October 7, 2022.
View in ArticleFilipe Beato, Anne Ardon, Itan Barmes, and Chris Knackstedt, Transitioning to a quantum-secure economy, World Economic Forum and Deloitte, September 2022.
View in ArticleDeloitte, Future forward readiness: Quantum risk, 2022.
View in ArticleJoe Faxlanger (Cyber Solutions Executive, RockITek), virtual interview with the author, March 31, 2023.
View in ArticleSkip Sanzeri, “Banks need to act now to ensure post-quantum cybersecurity,” Security Today, March 7, 2022.
View in ArticleNancy Liu, “‘Harvest now, decrypt later’ concern boosts quantum security awareness,” SDxCentral, September 28, 2022.
View in ArticleDeloitte Center for Financial Services analysis.
View in ArticleLara George (Co-founder, Walacor), virtual interview with the author, March 27, 2023.
View in ArticleJoe Faxlanger (Cyber Solutions Executive, RockITek), virtual interview with the author, March 31, 2023.
View in ArticleDeloitte, Future forward readiness: Quantum risk.
View in ArticleFinance Magnates, “Harnessing quantum computing for financial analysis and risk management,” April 13, 2023.
View in ArticleJonathan Ruane, Andrew McAfee, and William D. Oliver, “Quantum computing for business leaders,” Harvard Business Review, January-February 2022.
View in ArticleDeloitte, Future forward readiness: Quantum risk.
View in ArticleDannemiller, Davis, Cloud, and Gaughan, 2023 investment management outlook.
View in ArticleGreg Noone, “Who are the early adopters of quantum computers? Big banks, that’s who,” Tech monitor, January 12, 2023.
View in ArticleAuthors Mohak Bhuta and Doug Dannemiller wish to thank the following Deloitte Center for Financial Services colleagues for their insights and contributions: Patricia Danielecki, Sean Collins, Neerav Shah, Alice Hartnett, Seth Raskin, and Paul Kaiser.
Cover image by: Natalie Pfaff
