You Can’t Fight What You Don’t Understand: The Quantum Threat Demystified for Security Practitioners

You can't secure what you don't know exists, can't defend what you can't see, and can't prioritize what you don't understand. The quantum threat fails all three tests for most security teams today—not because it's unknowable, but because it's been buried under physics jargon, vendor hype, and headlines that swing between "it breaks everything tomorrow" and "it's fifty years away." Neither extreme helps you decide what to do on Monday.

This webinar cuts through the noise and rebuilds the quantum threat from a security practitioner's point of view — as a risk to be understood, not a science to be studied. No physics degree required.

Three lenses. One hour. Zero qubits for sale:

• What is the quantum threat, really? We'll define the actual threat in plain terms — what quantum computing can and can't do to the security controls you rely on, why it makes this a present-tense problem for data with a long intelligence shelf-life, and how to read the milestones that matter from the ones that are just marketing. The goal isn't to make you a physicist; it's to hand you a threat you can finally understand.
• The leadership lens — making it a risk decision, not a science project. Executives don't need qubits explained; they need to know whether this matters, how much, and when. We'll translate the threat into the language leadership already speaks: exposure driven by data lifetime, migration lead time, and compliance pressure — a simple way to answer, "does this matter for us, and how urgently?" without fear, uncertainty, or doubt.
• The practitioner lens — you've solved a version of this before. Here's the reassuring part: the quantum threat isn't alien. At its core it's a cryptographic and secrets-management problem—and if you've worked an incident or run an engagement, chances are you've already fought this type of problem. We'll draw direct analogies to problems you know lateral movement that started with a TLS endpoint still negotiating a downgraded cipher suite, or a service account signing with an algorithm deprecated three years ago. The box you popped by forcing a downgrade until something accepted the weak handshake, using a compromised CI/CD token or signing key. The quantum threat just adds one more entry to the list of crypto you assumed was safe — and the instincts those incidents sharpened, hunting the forgotten asset, mapping trust relationships, thinking in blast radius, are exactly the ones it demands. And it also helps with the exploding secrets problem now surfacing in machine identities, AI agents, and CI/CD pipelines.

You'll leave with a clear mental model of the threat, a leadership-ready way to frame the risk, and a set of no-regret actions that strengthen your security posture today — quantum or not.

Consider this the appetizer. If it whets your appetite, this session can grow into a deep-dive series — from the technology fundamentals to horizon-scanning for the next emerging threat.

Learning Objectives

• How to actually see the quantum threat — a hype-free definition of what quantum computing does and doesn't threaten, why "harvest now, decrypt later" makes it a today-problem for long-lived data, and how to tell meaningful milestones from marketing
• How to frame it as a leadership risk decision — a simple exposure model built on data lifetime, migration time, and compliance drivers that answers "does this matter for us, and when?" in language executives can act on
• How to attack it with skills you already have — why quantum readiness is the same cryptographic-inventory and secrets-management problem you fight today in certificates, machine identities, AI agents, and pipelines, and which discovery and crypto-agility steps pay off immediately.

This session supports content and knowledge from the SANS Cyber Defense curriculum. To learn more, browse upcoming courses, and access a variety of free Cyber Defense tools and resources, Click Here