Workshop Description
Financial services faces a quantum agenda with two distinct but interconnected halves. On the opportunity side, quantum computing promises competitive advantage in portfolio optimisation, derivatives pricing, credit risk modelling, and fraud detection. JPMorgan, Goldman Sachs, HSBC, and Barclays have all established quantum research programmes. McKinsey estimates quantum computing will generate $300 to $600 billion in value for financial services by 2035. On the obligation side, the NCSC published a three-phase PQC migration roadmap in March 2025 with a Phase 1 deadline of 2028. DORA (the EU Digital Operational Resilience Act) places ICT risk management obligations on financial entities that include cryptographic resilience. PCI DSS v4.0 and SWIFT CSCF are tightening cryptographic standards. A financial services CTO who understands only the opportunity side will miss the compliance deadlines. One who understands only the security side will miss the competitive window.
This briefing presents both sides to a non-technical executive audience. No physics background is required. The session covers which quantum computing use cases in financial services are nearest to production (and which are still speculative), what the regulatory obligations actually require and by when, what peer institutions are spending and on what, and how to structure a quantum programme that addresses both the opportunity and the obligation without over-committing to speculative capability. Participants leave with a dual-agenda investment framework, a board reporting template, and a regulatory checklist across UK, EU, and US jurisdictions.
What participants cover
- Quantum computing use cases nearest to production: portfolio optimisation (QAOA), derivatives pricing (QAE), credit risk modelling (quantum kernels)
- Honest NISQ assessment: which use cases deliver on current hardware and which require fault-tolerant machines still years away
- Post-quantum cryptography migration: NCSC three-phase roadmap, Phase 1 deadline 2028, ML-KEM and ML-DSA algorithm selection
- Regulatory obligations: DORA ICT risk management, PCI DSS v4.0 cryptographic requirements, SWIFT CSCF, Basel Committee quantum guidance
- Competitive intelligence: JPMorgan, Goldman Sachs, HSBC, Barclays quantum programme disclosures and investment levels
- Board governance: structuring a dual-agenda quantum programme, investment sequencing, vendor evaluation, avoiding consultant dependency