The General Services Administration (GSA) and the U.S. Department of the Treasury have announced dual initiatives to accelerate post-quantum cryptography (PQC) deployment across federal identity management systems, physical facility access, and financial sector networks. Grounded in OMB Memorandum M-26-15 and Executive Order 14412, the efforts establish operational frameworks and interagency workstreams to transition critical government and economic systems to quantum-resistant encryption standards.
| [ Federal & Financial PQC Migration Stack ] | ||
|---|---|---|
| GSA Identity & Physical Access | Interagency Governance & Strategy | Treasury Financial Task Force |
| • FICAM Architecture Modernization | • Bi-Weekly FICAM Working Group | • Workstream 1: PQC Sector Alignment |
| • FIPS 201 PACS Lab PQC Testing | • 40 Representatives Across 17 Agencies | • Workstream 2: Vendor Supply Chain |
| • Approved Products List (APL) Integration | • GSA PQC Summit (Sept 16, 2026) | • Workstream 3: Digital Assets & Web3 Risk |
GSA Overhauls FICAM and Physical Access Control Systems (PACS)
GSA’s Office of Government-wide Policy is modernizing federal identity architectures and facility access controls to ensure crypto-agility across both digital systems and physical infrastructure:
- FICAM Framework Modernization: GSA is updating the Federal Identity, Credential, and Access Management (FICAM) framework to integrate NIST-standardized quantum-resistant algorithms while maintaining backward compatibility with legacy federal IT environments.
- Physical & Badge Access Security: The FIPS 201 Evaluation Program, executed through GSA’s Physical Access Control System (PACS) lab, is expanding testing capabilities to validate PQC-compliant building access controls, visitor passes, and PIV employee badges. Qualified hardware and credentials will populate GSA’s mandatory Approved Products List (APL).
- Interagency Coordination Working Group: On August 12, 2026, GSA convened the first interagency FICAM modernization working group—bringing together 40 participants across 17 federal agencies to address non-human identities, automated access, and PQC credential deployment.
Treasury Launches Financial Sector Quantum-Readiness Task Force
Led by Treasury Secretary Scott Bessent and Assistant Secretary for Financial Institutions Luke Pettit, the Treasury Department has formally established a public-private Quantum-Readiness Task Force to protect core financial systems and market infrastructure:
- Sector Alignment & PQC Transition: Coordinates the phased migration of banks, payment processors, asset managers, and insurance networks to PQC algorithms.
- Third-Party & Vendor Readiness: Assesses software and hardware supply chain dependencies across core financial technology providers to eliminate single points of cryptographic failure.
- Digital Assets & Emerging Technology Risk: Evaluates quantum vulnerability across blockchain networks, smart contract platforms, stablecoin issuers, and digital asset custody protocols.
The Treasury Task Force aligns with global standards established by the G7 Cyber Expert Group, while GSA will host the 2026 Post-Quantum Cryptography Summit on September 16, 2026, to bring together government leaders and industry partners.
Review official policy updates via the GSA Blog here, read analysis on Federal News Network here, and examine coverage on Nextgov/FCW here.
August 25, 2026