The most expensive quantum mistake a CIO could make today may not be investing too early. It may be investing in the wrong capabilities, for the wrong reasons, without understanding the architectural and economic consequences.

Over decades of leading enterprise technology, architecture, modernization, and innovation in complex, highly regulated environments, I have seen a recurring pattern: technological enthusiasm advances faster than institutional readiness. Capital gets committed. Platforms become entrenched. Dependencies multiply. Business value remains difficult to demonstrate.

Quantum computing risks repeating that pattern, but with an important distinction: The cybersecurity consequences demand action today, while the timing and economics of broader commercial quantum advantage remain uncertain.

That is the strategic tension CIOs must resolve.

Quantum readiness and preparedness is not a race to acquire qubits. It is a discipline of protecting enterprise trust, preserving strategic options and directing scarce capital toward demonstrable value.

The fundamental question is no longer whether quantum computing deserves executive attention. It is whether CIOs and enterprises can distinguish what must be protected now, what deserves experimentation and what should remain an option rather than a financial commitment.

Two quantum clocks. One enterprise balance sheet

Quantum presents two fundamentally different timelines to a CIO.

The first is the security clock.

In August 2024, the National Institute of Standards and Technology (NIST) published its first three finalized post-quantum cryptography standards, establishing practical mechanisms for protecting information against anticipated quantum-enabled threats.

This is critical because cryptography is not an isolated cybersecurity component. It underpins identities, financial transactions, digital signatures, software integrity, communications, connected infrastructure and trusted business relationships.

A sufficiently capable future quantum computer could compromise certain widely deployed public-key cryptographic methods.

The October 2026 U.S. Government Accountability Office (GAO) report, Quantum Computing: Federal Actions Needed to Prepare for Emerging Cyber Threat, reinforces the urgency. None of the 24 federal agencies examined had fully addressed all three assessed preparatory practices for migrating vulnerable cryptography.

The lesson extends beyond government: you cannot migrate cryptographic dependencies you have not discovered.

The second is the commercial advantage clock.

Quantum computing may eventually offer meaningful advantages in selected areas of chemistry, materials science, simulation and optimization. But promising research does not automatically translate into repeatable enterprise economics.

IBM’s published quantum technology roadmap targets a fault-tolerant quantum system in 2029. That is an important technological ambition, not a guaranteed date for widespread commercial advantage.

These two clocks should not share the same investment assumptions.

Security readiness is justified by exposure and risk tolerance. Commercial adoption must be justified by demonstrated advantage and economic returns.

Confusing the two creates either dangerous underinvestment or speculative overspending for the CIOs.

Architecture before acquisition

The enterprise architecture challenge is more consequential than the quantum procurement question.

For CIOs, post-quantum preparation begins with initial understanding of where vulnerable cryptography exists across their enterprise, how it supports critical business services and whether those dependencies can be changed without destabilizing operations.

For example, consider a globally distributed financial institution.

Cryptographic dependencies may span payment platforms, customer identities, authentication services, certificates, mainframes, cloud environments, third-party APIs and decades of retained information.

Replacing an algorithm is not necessarily equivalent to replacing a library.

Some changes affect protocols, hardware security modules, certificate lifecycles, application compatibility, vendor contracts and operational resilience.

This demands cryptographic agility: the ability to replace or adapt cryptographic mechanisms without rebuilding the enterprise.

The same architectural discipline applies to future quantum workloads.

Enterprises should favor modular integration, well-defined interfaces, workload portability and interoperability across classical computing, high-performance computing, AI and emerging quantum services.

Quantum will not make classical computing obsolete. The more credible architectural direction is selective integration where a quantum capability demonstrably improves a specific computational outcome.

The architectural objective therefore is not quantum dependence. It is quantum optionality.

An enterprise should be able to adopt a useful breakthrough without surrendering control of its technology economics or becoming captive to a single provider.

The missing equation: Quantum workload economics

The quantum conversation becomes strategically meaningful when CIOs stop asking what a quantum computer can theoretically perform and start asking what business outcome it can improve.

The OECD’s 2026 research, Building Business Readiness for Quantum Computing, identifies barriers including technological immaturity, uncertainty surrounding business applications, access and training costs, and shortages of specialized expertise.

These are not simply engineering obstacles. They are capital allocation constraints. This means that a quantum experiment may demonstrate technical progress while failing to establish commercial value.

For example, a proposed optimization workload should be evaluated against competitive classical algorithms, realistic datasets, operational constraints and the full cost of execution.

The comparison must include more than processing time. It should consider problem preparation, data movement, orchestration, error mitigation or correction, integration, specialized talent, assurance and recurring operating expenses.

Even an impressive laboratory result may offer little economic benefit if the end-to-end enterprise workflow becomes slower, costlier or less dependable.

I would therefore introduce a more demanding investment metric: Cost per Trusted Quantum-Enabled Business Outcome.

This proposed measure evaluates the total attributable cost of achieving a validated business result, including the controls necessary to make that result operationally acceptable.

The denominator is not the number of quantum circuits executed. It is the number of useful, verified business outcomes delivered.

Where no defensible quantum advantage exists, the responsible decision may be to continue using classical computing.

That is not technological conservatism. It is capital discipline.

Introducing the quantum capital discipline framework

I propose a six-dimensional executive framework for separating quantum preparedness from quantum speculation.

1. Exposure: What must we protect? Identify vulnerable cryptographic dependencies, long-lived sensitive information, critical services and contractual or regulatory obligations. Prioritize remediation by business consequence, not technology fashion.
2. Relevance: What problem warrants quantum? Establish a specific business problem whose computational characteristics plausibly justify quantum investigation. Scientific curiosity alone is not an enterprise investment thesis.
3. Advantage: What evidence proves improvement? Demand reproducible comparisons against strong classical alternatives. Evaluate solution quality, performance, operational constraints and independent validation.
4. Architecture: Can we adapt without lock-in? Assess portability, integration complexity, vendor concentration, reversibility and the ability to change technology choices as the market evolves.
5. Economics: What is the full cost of value? Measure total lifecycle costs, opportunity costs, talent requirements and credible returns. Distinguish research expenditure from production investment.
6. Authority: Who decides to advance, defer or stop? Assign accountable decision makers, measurable milestones, investment thresholds and explicit exit criteria. Together, these dimensions form the Quantum Capital Discipline Framework.

Its governing principle is straightforward:

Capital follows evidence. Architecture preserves options. Governance owns consequences.

Importantly, this framework does not subject essential cryptographic remediation to the same commercial-return requirements as speculative quantum workloads. Security obligations and innovation opportunities require different investment justifications.

What boards should demand from their CIOs

Quantum strategy should enter Board discussions through enterprise risk, capital allocation, resilience and competitive positioning — not promotional demonstrations.

I would encourage directors and executive committees to demand answers to five key questions:

1. Which critical business services and information assets face material quantum-related cryptographic exposure?
2. Can we modernize vulnerable dependencies without unacceptable operational disruption?
3. Which proposed quantum applications outperform credible classical alternatives?
4. What evidence would justify expanding, delaying or terminating quantum investments?
5. Who is accountable for the financial, security and architectural consequences?

These five questions create a practical governance boundary between preparedness and speculation. They also expose a broader institutional weakness: enterprises often approve emerging technology investments without establishing the conditions under which those investments should be reconsidered.

Quantum requires a different approach.

Investment decisions should be revisited when technical capabilities, benchmark results, standards, security exposure or business economics materially change.

Boards should insist on measurable progress but avoid manufacturing artificial deadlines for breakthroughs nobody can reliably predict.

The CIO’s next mandate: Preserve the freedom to act

Quantum computing will not transform every industry simultaneously, deliver equal advantage across workloads or reward every early investor.

Some enterprises may eventually realize significant value from specialized quantum applications. Others may encounter quantum’s most immediate consequences through cryptographic modernization, technology dependencies and the protection of long-lived information.

Both outcomes demand leadership today.

The CIO’s responsibility is not to predict which quantum architecture will prevail or which vendor will dominate. It is to ensure that today’s decisions do not compromise tomorrow’s ability to compete, adapt and protect enterprise trust.

That requires investment discipline, architectural foresight, credible experimentation and accountable governance.

The next quantum advantage may belong not to the enterprise that invests first or spends the most, but to the one that knows precisely when to act, where to invest and when to walk away.

Quantum readiness is not measured by the technology an enterprise owns. It is measured by the strategic freedom it retains, the risks it responsibly reduces and the business value it can demonstrably create.

That is the difference between quantum enthusiasm and quantum leadership.

Quantum leadership is not about predicting when the future arrives. It is about architecting the freedom to embrace it, exercising the discipline to invest in it and preserving the authority to walk away when promise fails to become value.

A practical, commercial quantum computer is over a decade away, executives at Japanese IT services company NEC are reported as saying.

That’s why, according to Japanese news publication The Mainichi, company has pulled the plug on its plans to develop a quantum computer — although it will still continue research into quantum technology.

NEC sources told The Mainichi that it would take at least a decade to build a quantum computing that could be put to practical use, and it would be difficult to monetize the technology.

This is quite a turnaround for NEC which three years ago was talking about its advances in quantum and its plans to accelerate investment in the technology.  The company is certainly bucking the trend as quantum computing is seen as being very much at the cutting edge of research. Pioneers in the field were awarded the Nobel Prize in Physics last year, while companies such as Nvidia and IBM are keen to boost their quantum credentials.

Despite its early successes in the quantum field, The Mainichi reports that NEC is lagging its Japanese competitors such as Fujitsu and Hitachi when it comes to the latest advances.

There is also the level of investment required. According to The Mainichi, Japan is set to commit just 10 trillion yen ($65.3 billion) to quantum computing by 2040, far lower than the sums invested by the US and China.

We’re talking about a long game. Quantum technology has been talked about for some time, but we’re still a long way from seeing the technology in the mainstream. NEC may not be the only company to decide the cost of investment is not worth it.

As quantum computing inches closer to mainstream enterprise reality, a key question is arising: Could the technology shake up how IT leaders make use of AI?

Much has been made about the problems quantum computing will create for traditional encryption methods, but experts say the technology could also take some pressure off the compute of large AI workloads, with quantum chips augmenting the GPUs and CPUs used today.

The timeframe for availability of general-purpose, error-corrected, or fault-tolerant quantum computers remains up for debate, but some quantum-focused companies have roadmaps for quantum systems to hit the market in the next two to four years.

For example, QuEra has projected that cloud access to a fault-tolerant 256-qubit system will be available in 2028, and IBM plans to release its 200-qubit Starling system in 2029. Some critics question those product roadmaps, however.

Still, Australian company Silicon Quantum Computing (SQC) is already selling quantum-based chips — called QPUs or quantum machine learning processors — trained to handle specific machine learning applications in industries such as finance, pharmaceuticals, energy, and defense.

Quantum-based chips can already speed up the training of AI models significantly, and quantum computers have the potential to run AI workloads more efficiently than traditional GPUs and CPUs, says Matthew Bradley, SQC’s vice president of corporate development.

“Given the increasing costs of AI, and if one is concerned about the broader power consumption and resource intensity of AI, that’s a really material result,” he explains. “It’s not quite as simple as drawing a straight line — if you do X, you can save Y — but it’s possible you can save a certain amount of model time that is resource-beneficial, both in terms of costs of running the model, but also sort of time and efficiency within the organization.”

Other industry insiders see the same potential. In some cases, quantum computers are already being used alongside AI to significantly improve results, notes Murray Thom, vice president of quantum technology evangelism at quantum provider D-Wave Systems.

For example, Japanese pharmaceutical company Shionogi has used D-Wave’s quantum computing technology and AI in the drug discovery process, resulting in a 10-fold increase in the number of desirable molecules uncovered, he says.

“We see early research and proof-of-concept projects indicating great potential for quantum computers to handle certain elements of AI workloads more efficiently than CPUs and GPUs,” Thom adds. “The opportunity is not for quantum computers to replace CPUs and GPUs, but to complement them by handling parts of AI workflows where quantum approaches may offer advantages in performance, solution quality, or energy efficiency.”

Outsiders also see benefits

As representatives of the quantum industry, Bradley and Thom certainly have strong motivations to tout the benefits of the technology, but other experts also see potential.

Most of the focus so far on the benefits of quantum AI has been on so-called quantum speed-up, when quantum systems process information faster than traditional computers, enabling enterprises to more readily tackle complex calculations and large data sets.

Quantum computers could also explore multiple solutions at the same time, allowing for accelerated decision-making.

Experts say quantum computers won’t replace traditional hardware in the foreseeable future, but running a hybrid architecture combining QPUs, CPUs, and GPUs could accelerate AI workloads and create some energy and compute efficiencies.

“GPUs and CPUs will continue to support AI workloads, and they will keep getting more capable,” says John Licata, futures director and enterprise quantum lead at ServiceNow. “QPUs come in alongside them, on the specific problems where classical compute runs into limits of scale, time, or scope.”

But operators of AI systems need to think creatively about how to use quantum computing alongside AI to get the full benefits, he adds. IT leaders must envision future AI workloads to find a place for quantum AI, he suggests.

“There is real strategic advantage in simulating multiple future pathways to see where GPUs come under stress, especially with billions of agents coming online in the next few years, greater needs for governance and regulatory compliance, and new ways to deliver autonomous decision-making with more confidence,” he says. “The door that opens is hybrid workloads where GPUs, CPUs, and QPUs each do what they do best.”

Quantum challenges

Quantum solutions still have some disadvantages, however, that make them unlikely replacements for GPUs in AI tasks, other experts say. GPUs are well suited to the dense matrix operations that dominate current machine learning problems, whereas many proposed quantum algorithms come with significant data-loading, measurement, and error-correction challenges, says Arjun Kudinoor, quantum security advisor at cybersecurity vendor Protegrity.

“Quantum computers could eventually accelerate some AI workloads, but I would not expect them to broadly replace GPUs,” he adds. “Quantum computers still need major advances in error correction, and any benefits will probably be limited to specific subroutines of larger AI workloads.”

Adnan Masood, chief AI architect at IT services vendor UST, also sees significant potential for quantum computing in the coming years but agrees that there are major technical hurdles ahead for the technology to replace GPUs and CPUs for AI tasks.

Still, he expects hybrid quantum and traditional architecture to arrive in the 2030s, with GPU clusters offloading structured workloads to QPUs and ingesting the output back.

Instead of focusing on the potential for QPUs to replace GPUs or cut energy consumption, IT leaders should focus on the impact on encryption and on quantum-inspired classical algorithms that run on GPUs, such as tensor network compression, Masood says.

Post-quantum cryptography is a non-speculative approach to quantum computing, he adds. “The threat is ‘harvest now, decrypt later’ — an adversary captures encrypted archives and traffic today and decrypts them once a cryptographically relevant machine exists,” he says.

Masood doesn’t recommend that IT leaders start to hire quantum machine learning teams. Every quantum AI vendor pitch should examine whether they provide real hardware or a simulator, whether they deal with classical data or quantum-native data, and what exactly their product is compared to.

IT leaders should also look for evidence of quantum advances, he says, including peer-reviewed end-to-end quantum ML advantages on classical data, and quantum product timelines delivered on schedule.

“Set your escalation triggers now, so you react to evidence rather than press releases,” he adds.

Protegrity’s Kudinoor, also a doctoral student in MIT’s Center for Theoretical Physics, agrees on the encryption threat, with the potential for quantum computers to break RSA- and ECC-based encryption.

Meanwhile, IT leaders should start to pay attention to the quantum AI space, he suggests. “CIOs and other IT leaders should watch the quantum and AI space with cautious optimism, relying on trusted subject matter experts and avoiding hype-driven investments,” he says.