The Quantum Computing Timeline Is Wrong. Here's What the Data Actually Says.
Two types of organizations are making quantum computing decisions right now. The first is building quantum labs, hiring physicists, and releasing press releases about first-mover advantage in a technology that doesn't yet work for any of their use cases. The second has decided quantum is a science project and scheduled the topic for review in 2032. Both postures are wrong — and both are being made against the same data gap: almost nobody building enterprise strategy has read what the OECD and Forrester actually say, as opposed to what the quantum vendors want them to believe.
The commercial quantum computing timeline is softer than every headline implies. But that isn't a reason to ignore the technology. It's a reason to understand it precisely enough to make one decision clearly — a decision that doesn't require quantum computers to work yet, and that most organizations are already late on.
What NISQ Actually Means — and What It Doesn't
The term "NISQ" — Noisy Intermediate-Scale Quantum — was coined by physicist John Preskill in 2018. It describes where the field is now: quantum processors with roughly 50 to 1,000 qubits, but without the error correction needed to run long, complex algorithms reliably. Error rates run at approximately one error per 100 to 1,000 gate operations, depending on the system. That sounds manageable until you realize that algorithms like Shor's — the one that threatens encryption — require tens of millions of reliable operations.
The OECD's 2026 report on quantum business readiness is careful about this distinction. Current quantum computers are powerful enough to demonstrate quantum phenomena and run limited experiments, but not powerful enough to provide commercial advantage over the best classical systems at any meaningful real-world task. No quantum processor has beaten a classical supercomputer at a problem that actually matters to any business.
Google's Willow chip, announced in late 2024, is a genuine engineering milestone. It demonstrated error correction below the threshold — meaning adding more qubits reduced errors rather than compounding them. That's a fundamental prerequisite for scaling. But Willow's benchmark was a random circuit sampling problem specifically designed to be hard for classical computers and easy for quantum ones. It solved an artificial problem. No logistics optimization, no drug discovery, no financial modeling — nothing applicable.
Forrester's 2026 assessment uses the word "likely" when discussing practical quantum computing by 2030. Not certain. Not inevitable. Likely, at limited scale, for specific problem types. That language matters when organizations are making multiyear capital decisions.
The Hype-Reality Gap Is Not Uniform
The frustrating thing about quantum hype is that it's simultaneously overstated and understated — just on different dimensions.
Overstated: the timeline to commercial quantum advantage for optimization, simulation, and machine learning. These applications require fault-tolerant quantum computing with millions of logical qubits, assembled from potentially billions of physical qubits given current error rates. The engineering gap between where we are and where we need to be is not a marketing problem. It's a physics problem, and physics problems don't accelerate on press release schedules.
Understated: the cryptographic threat. Shor's algorithm, when run on a fault-tolerant quantum computer, can factor the large primes that underpin RSA encryption and break the discrete logarithm problem underlying elliptic-curve cryptography. RSA-2048, the standard used in TLS, HTTPS, SSH, and most enterprise PKI, would be broken. Not weakened — broken. This doesn't require quantum computing to be commercially useful for anything else. It only requires that one problem — factoring — get solved at scale.
The timeline for fault-tolerant quantum factoring remains uncertain. Estimates range from 2030 to 2040 or beyond. But the threat is concrete enough that NIST finalized its first post-quantum cryptography standards in 2024 — ML-KEM (formerly CRYSTALS-Kyber) for key encapsulation, ML-DSA (formerly CRYSTALS-Dilithium) for digital signatures. These weren't published out of caution. They were published because the migration timeline for enterprise cryptography is genuinely long.
The One Action That Doesn't Require Quantum Advantage
Here is the scenario that makes "wait and see" genuinely dangerous: adversaries are harvesting encrypted data now, storing it, and planning to decrypt it later when fault-tolerant quantum computers arrive. If your organization transmits sensitive data over the next 5-10 years that should remain confidential for decades — health records, financial transactions, government communications, intellectual property — that data is potentially being collected today under the assumption that it will become decryptable.
The OECD report calls this "harvest now, decrypt later" and flags it as the most proximate quantum risk for most organizations. It doesn't require quantum computers to work yet. It only requires that they eventually work. And the preparation — migrating to post-quantum cryptographic standards — has a lead time of years, not months, because enterprise PKI migrations involve legacy systems, vendor dependencies, certificate lifecycle management, and compliance documentation.
Organizations that treat quantum security as a 2030 problem are almost certainly wrong about the timeline they actually have. The useful question isn't "when will quantum computers break encryption?" It's "how long does our crypto migration take, and when do we need to start?"
What Responsible Quantum Readiness Actually Looks Like
For most organizations, the honest answer to "what should we do about quantum computing?" falls into three categories.
Crypto migration: start now. Audit which systems use RSA and ECC for key exchange or signatures. Inventory the sensitivity and longevity of the data they protect. Evaluate NIST's ML-KEM and ML-DSA. Most major vendors — AWS, Google, Microsoft, Cloudflare — have begun rolling out post-quantum support in their TLS stacks. The question isn't whether to migrate; it's how to sequence it against your existing certificate and key management infrastructure.
Commercial quantum: monitor, don't invest. If your use case involves optimization problems (supply chain, portfolio construction, molecular simulation), stay informed. Follow IBM, Google, and IonQ roadmaps. Benchmark your classical solvers against available quantum cloud services on small instances. Build the muscle memory for quantum-classical hybrid approaches. But don't build business cases around quantum advantage for production workloads until you have evidence it beats classical on your actual problem at meaningful scale.
Don't buy the narrative. The quantum computing industry has a financial incentive to compress the timeline in investor materials, partner announcements, and conference keynotes. The OECD and Forrester data suggests real commercial advantage in optimization and simulation arrives "likely" post-2030, under favorable conditions. That's a decade-plus horizon for most applications. Boards that are approving quantum pilot budgets based on competitive threat — "we need to start or be left behind" — are funding uncertainty insurance at best and vendor marketing at worst.
The honest framing is this: quantum computing is a real technology with genuine long-term implications, one near-term threat that is concrete and actionable, and a commercial timeline that is more ambiguous than its publicity suggests. The AI benchmark hype dynamic applies here too — the organizations with the most to sell are setting the frame.
The Question That Focuses Everything
What's the sensitivity classification and longevity requirement of the data your organization encrypts today?
If your answer is "low sensitivity, short-lived" — most operational data — quantum readiness is a monitoring exercise. If your answer is "high sensitivity, long retention" — financial records, protected health information, government secrets, long-term IP — quantum readiness has a specific, actionable component that starts with your public-key infrastructure and ends with a migration plan that has a realistic timeline and owner.
The organizations making the worst decisions on quantum aren't the ones who don't understand quantum physics. They're the ones who never asked that question clearly.
Photo by panumas nikhomkhai via Pexels