Top 5 issues: 4. Quantum leaps ahead

type
Boardroom article
author
By Guy Beatson, General Manager, and Susan Cuthbert, Principal Advisor – Governance Leadership Centre, IoD
date
18 Dec 2024
read time
2 min to read
Top 5 issues: 4. Quantum leaps ahead

As the saying goes, ‘you ain’t seen nothing yet’. AI is beginning to revolutionise many companies and organisations, and we have only seen the beginning in New Zealand. And there is more to come potentially sooner than we expect, including quantum computing. Familiarity with these advancements will help boards guide their organisations in seizing opportunities and mitigating risks in an evolving technological landscape.

Starting in late 2022, chat interfaces with AI took the world by storm, even though AI had existed for decades. A new and faster wave of technological progress, especially in areas such as AI and quantum computing, has the potential to reshape entire industries and is starting to do so internationally. 
 
Quantum computing, once it moves from the research lab to initial commercial use, promises a level of computational power that could change how organisations tackle complex challenges. At the same time, AI is increasingly central to strategic decisions, automating intricate processes and enhancing decision-making. Understanding how  these technologies could influence their organisations will help directors make well-informed choices. 
 
New Zealand firms and organisations are still playing catch-up with AI. Quantum computing, when it hits, will add to the snowball of change that needs to be anticipated to build resilient organisations and take advantage of this further significant technological change. 
 
This will require further investment where there is already a level of tech debt. Taking short-term routes for digital technology to achieve immediate goals can create future challenges that require more resources down the track. For example, quick fixes to address cyber security vulnerabilities now and not addressing the underlying issues can cause significant issues later. 

Why it matters

Quantum computing will offer the potential to address problems that traditional computers cannot manage, providing breakthroughs in areas such as climate modelling, financial risk analysis and managing complex logistics.

Organisations will find new ways to optimise operations or innovate their offerings. AI, synthetic data and other digital tools are fundamentally changing how businesses think about strategy, manage risks and drive innovation. 

For directors, navigating this rapidly evolving area requires balancing investments in today’s technologies, while keeping an eye on the possibilities that quantum computing and other advancements might bring. 

Even if it is not yet with us in our day-to-day lives, the development of quantum computing is advancing rapidly and has significant implications for cyber security. ‘Q-day’ is the anticipated moment when quantum computers will become powerful enough to break current encryption algorithms, effectively compromising the cyber security infrastructure relied upon globally.

As directors and board members, it is imperative to recognise that current encryption methods could be rendered ineffective overnight. There are credible reports of cyberattackers stockpiling encrypted data now, with the intent to decrypt it once quantum technology becomes capable. This means sensitive information that seems secure today could be exposed in the future. Underscoring the urgency of the situation, the United States Government has already issued executive orders and guidance on preparing for quantum cyber security threats. As a further signal of the imperative around this technology, the US National Institute of Standards and Technology (NIST) has released the first three finalised post-quantum encryption standards. 

Directors and boards should prioritise staying informed, assess their organisation’s readiness and support management in appropriately anticipating these developments, rather than having a ‘blind spot’. This includes beginning to consider investing in quantum- resistant cryptographic solutions and updating security protocols accordingly. By taking steps over the next year or two, boards will help to not only safeguard their organisation’s assets but also ensure compliance with emerging regulations. The window for preparation is narrowing. 

At the same time, quantum computing won’t just be a challenge for cyber security. It has the potential to bring opportunities for better protection, with quantum encryption creating secure communication channels, reducing the risk of data being intercepted. 

 

Read the companion article by Candice Kinser CMInstD, Board Director

Ready, not reckless: preparing for a quantum world

Artificial intelligence and quantum computing are transforming business strategy at a pace few expected. However, before boards rush to embrace these innovations, it is crucial to pause and reflect. 

At a recent IoD conference, I urged directors to approach AI with caution – not hesitation, but deliberate consideration. Why? Because adopting technology without a clear purpose or strategy often leads to confusion, not competitive advantage. 
 
Quantum computing, unlike traditional computing, leverages quantum mechanics to process information at extraordinary speeds. While classical computers solve problems step by step, quantum computers evaluate multiple possibilities simultaneously, excelling in tasks such as optimising supply chains, simulating plant growth, improving financial models and accelerating drug discovery. 
 
Large-scale investments in quantum computing or AI may seem unattainable for most New Zealand businesses, but these technologies are far from irrelevant. Platforms such as IBM’s and Google’s quantum-as-a-service offerings allow organisations to explore their potential without requiring costly infrastructure. Boards can test ideas and develop understanding without overcommitting resources. 
 
AI’s implementation must be strategic. Machine learning and predictive analytics tools can impress, but without a clear purpose they risk falling short. Boards should first ask: What problem are we solving? What data do we need? Does this align with our strategy, and can we govern it responsibly? Framing the problem  is often the hardest step – far more challenging than analysing the data itself.
 
The main takeaway is that boards should prioritise readiness over immediate full- scale adoption. Key foundational steps to discuss and prioritise include: 
 
Invest in digital literacy: Equip the board and leadership team with the knowledge to evaluate the potential and risks of emerging technologies, fostering a culture of continuous learning in this evolving space. Programs such as MIT xPro series, the online Berkeley Haas School of Business, or the University of Auckland’s advanced degrees in AI and Data Governance, provide excellent training. 
 
Explore pilot projects to test: Collaborate with academic or tech partners to trial small-scale applications in logistics, risk modelling or climate solutions. This allows organisations to experiment and learn without requiring large-scale investments. 
 
Align strategy with tech & business roadmaps: Integrate quantum computing and AI into long-term plans and budgets, recognising that sustained investment is necessary to remain competitive. Boards should encourage management to identify measurable opportunities and prioritise discussions on technology trends early in meetings when focus is sharpest. 
 
A director’s mandate is not to blindly follow trends but to harness technology thoughtfully, aligning it with the organisation’s mission and long-term goals. AI and quantum computing are transformative tools, capable of propelling New Zealand businesses to the forefront of global competition. We need to navigate this transformation thoughtfully, driving clarity, purpose, and lasting value for our stakeholders. 


Candace Kinser CMInstD is a board director, consultant, entrepreneur and technology leader with a career spanning governance, innovation and digital transformation. Her current governance portfolio includes Chair of Cancer Society Auckland Northland and Helius Therapeutics, a non-executive Director at Plant and Food Research, and a member of the Council of Governors for the University of Auckland. 


Board focus, action and discussions for 2025

FOCUS ACTIONS DISCUSSION
Preparing for technological change
  • Directors and boards can take steps to enhance digital technology literacy with focused deep dives on emerging digital technologies and their impact

 

  • What initiatives should the board implement to ensure board members are sufficiently informed about quantum computing’s potential and risks to our industry?
  • How can the board integrate insights from quantum computing experts into strategic planning and ongoing board education efforts?
Balancing timing and investment
  • Add quantum computing readiness into existing strategies and risk management frameworks, using scenarios to assess the potential impact and timing
  • What are the most critical risks quantum computing poses to current data security practices and how should the board address them proactively?
  • How does the board align the organisation’s strategic objectives to leverage quantum advancements without jeopardising existing technology investments and frameworks?
Future-proofing technology decisions
  • Ensure technology strategies approved by the board are flexible and adaptable enough to anticipate and accommodate further quantum computing developments
  • What governance structures can the board develop to remain agile as quantum computing evolves, and new capabilities become viable?
  • How should the board structure partnerships or collaborations with research institutions to keep pace and apply relevant advancements effectively?
Considering data security and risk management
  • Review existing cyber security policy so it reflects the potential risk that quantum computing poses for current encryption methods

 

  • What steps must the board take now to transition the organisation’s data protection measures to post-quantum cryptography, and what timeline should be set for this implementation?
  • How does the board evaluate the potential impact on current risk management and cyber security strategies, and what contingencies should we prepare?