Workshop Description
Chief officers of emergency service organisations hold personal governance accountability for technology risk under the Network and Information Systems (NIS) Regulations. Quantum computing creates a specific technology risk: the cryptographic protocols securing emergency communications (Airwave/ESN), dispatch systems (CAD), and shared intelligence platforms will become vulnerable within the service life of systems being procured today. HMICFRS, HMICFRS(W), and equivalent inspectorates will eventually assess quantum preparedness as part of their technology and efficiency inspections. Chief officers need to understand the scope of the exposure, the regulatory timeline, and the budget implications without requiring cryptographic expertise.
This briefing provides chief officers with a governance framework for quantum technology risk. We cover the regulatory obligations that create personal accountability (NIS Regulations management body duties, Home Office critical communications requirements), the HMICFRS inspection context (how quantum preparedness fits within the PEEL assessment framework), the Spending Review and business case preparation for PQC migration funding, and the gold/silver/bronze command implications of communications security degradation. The briefing distinguishes between quantum security threats (requiring action now via PQC migration) and quantum computing opportunities (resource optimisation, predictive analytics) that warrant monitoring but not immediate investment. Participants leave with a decision framework and a governance action plan.
What participants cover
- NIS Regulations governance: management body duties for operators of essential services, personal accountability for cybersecurity, and how quantum risk fits within existing NIS compliance programmes
- HMICFRS inspection preparedness: how quantum security preparedness maps to PEEL (Police Effectiveness, Efficiency and Legitimacy) assessment criteria and technology inspection themes
- Home Office critical communications obligations: Airwave/ESN security requirements, quantum readiness expectations, and the regulatory trajectory for mission-critical communications
- Spending Review business case: framing PQC migration investment within the three-year funding cycle, cost estimation ranges, and joint procurement opportunities with partner agencies
- Gold/silver/bronze command implications: what communications security degradation means for command and control during major incidents, and how PQC readiness affects operational resilience
- Threat versus opportunity distinction: PQC migration (action required now) versus quantum computing applications (monitor, do not invest) and how to communicate this distinction to governing bodies