Cybersecurity and Quantum Resilience Study
Senate Bill 562 establishes the North Carolina Cybersecurity and Quantum Resilience Study Commission to examine how emerging quantum computing technologies could affect the security of state systems, legacy encryption, and critical infrastructure. The commission is directed to study vulnerabilities in state IT systems, Internet of Things devices, smart city initiatives, and related cryptographic standards, with a focus on identifying where current protections may fail if quantum computing makes widely used encryption methods obsolete or easier to break.
The commission would be composed of 21 members appointed by the Governor, the President Pro Tempore of the Senate, and the Speaker of the House, including state agency representatives, cybersecurity experts, academic experts, industry representatives, public policy experts, and members of the public. It must collaborate with universities and industry, assess risks, and produce a roadmap recommending legislative, regulatory, or administrative steps for moving toward quantum-safe encryption and stronger cybersecurity practices. The commission must report its findings and recommendations to the General Assembly by July 1, 2026.
The bill does not immediately change substantive cybersecurity law, but it creates a new study commission and appropriates $250,000 from the General Fund to support its work. It also directs the Joint Legislative Committee on Information Technology to monitor the commission and contemplates future legislative or administrative action based on the commission’s report. The measure affects state agencies, critical infrastructure operators, and technology stakeholders by initiating a formal review of encryption and quantum-related risks, while also making sensitive information gathered by the commission confidential rather than public record.
Based on the bill text and the absence of recorded committee debate or votes, the measure appears to be framed as a proactive, forward-looking cybersecurity planning bill rather than a controversial policy overhaul. Its tone is precautionary and research-oriented, emphasizing collaboration with academic and industry experts and the need to prepare for emerging technological risks. No opposing viewpoints are documented in the provided materials, so the available record suggests neutral to favorable treatment focused on preparedness and resilience.
The main potential points of contention are the $250,000 appropriation, the creation of a new commission, and the confidentiality provision for sensitive information. Some stakeholders may question whether the state should spend public funds on a study before quantum threats become immediate, while others may support the investment as prudent risk management. The bill also balances transparency against security by allowing the commission to designate information as sensitive, which could raise concerns among open-government advocates even as cybersecurity experts may view it as necessary to protect technical details.