So if you can sort of take me back to... quantum 101 for a moment and then talk about the good stuff that we can expect to come out of this.

Absolutely, Cam.

So big shoes to fill with Justin Trudeau, but here's a short edit.

So, you know, much as astronomy gives us the rules that govern things at the very large scale, at the scale of galaxies or planets and so on, quantum goes the other end of the spectrum and it defines behaviors that occur at the most fundamental level of nature at the level of photons, which is fundamental unit of light, or atoms, fundamental unit of nature.

And oddly, the rules that govern behavior at those scales are very different to what you and I see at human scale.

And you have these bizarre behaviors that occur, such as what they call entanglement, where you can have two particles that are created from a common source and they go trucking off to opposite ends of the universe.

And in some odd way, which we cannot explain very well even today, but they remain connected in some sense.

Yeah.

What are the other steps that organizations should be taking to manage this risk, both into the future, but also to address the issue around the harvest now, decrypt later issue, which is currently a risk for organizations?

So the first is many organizations, particularly large ones, don't have a complete understanding of all the data sets they hold.

So you should start with a mapping out, exactly as you were saying, of all the data that you hold.

Where does it reside? Who has access to it? What level of sensitivity applies to that data? That's quite a non-trivial exercise for many organizations, particularly larger ones with geographically dispersed locations over which they might run their businesses.

The second step is to understand what cryptographic mechanisms are current, if any, are currently in place.

So how's that data protected? Who has access to the encryption keys that protect that data? What security controls or policies have you enforced over the top of that? So once you have those two data sets, it enables you to do a bit of a gap analysis.

Say, okay, this is what I've got out of everything that I've got in my data holdings.

But what are the actions that you'd recommend they take over the next six to 12 months to oversee these sorts of risks adequately? And also, I'd be interested to hear your views on how organizations should be framing these risks to make sure that they're getting the adequate investment and resource allocation that is required to do all of the things that you've been talking about.