Abstract

The advancement of quantum computing forces organizations to reconsider cryptographic foundations of digital trust. Scaled quantum computers may threaten public-key cryptography used for communication, authentication, data exchange, and transaction processing. Migration to post-quantum cryptography (PQC) is more than an algorithm upgrade. Organizations must locate quantum-vulnerable cryptography across ecosystems and develop migration plans. Yet, PQC readiness is limited. A Trusted Computing Group (2025) survey of 1,500 cybersecurity professionals found 91% reported no formal PQC roadmap, while 81% said current cryptographic libraries and hardware security modules were not migration-ready. IS research is examining PQC migration, including banking-focused work highlighting variation in strategies, resources, and timelines (Brettschneider & Mendling, 2025). We build on prior work by focusing on FinTech ecosystem readiness, especially digital payments. Atlanta’s “Transaction Alley” illustrates why this context matters, as roughly 70% of global financial transactions pass through companies headquartered in metro Atlanta (Georgia Department of Economic Development, n.d.) amounting to 300 billion transactions worth $49 Billion generated by 10 public FinTechs alone (Fintech Atlanta, n.d.). Digital payments rely on cryptographic trust across merchants, gateways, processors, wallets, APIs, and cloud services. Since many FinTech firms use payment infrastructure they do not fully own, PQC migration is a challenge in coordinating ecosystems and digital trust governance. This research investigates how FinTech organizations govern PQC readiness across interdependent digital payment ecosystems. We ask how firms identify cryptographic dependencies, assess vendor preparedness, coordinate migration across partners, and preserve trust in high-volume transaction environments. Through exploratory interviews, we aim to develop a FinTech PQC readiness framework that explains how firms move from awareness to dependency discovery, vendor assurance, migration coordination, and trust preservation. The study extends IS research by explaining readiness-building when security infrastructure is invisible, distributed, transaction-critical, and externally dependent. This research will also help leaders structure governance, vendor assessments, and migration roadmaps for quantum-era resilience in digital payments.

Download

Share

COinS