On November 18, 2022, the Office of Management and Budget (OMB) issued Memorandum M-23-02, “Migrating to Post-Quantum Cryptography,” to the heads of executive departments and agencies. The memorandum provided direction for agencies to comply with NSM-10’s requirements for Federal Civilian Executive Branch (FCEB) systems.
Agencies were directed to conduct prioritized inventories of cryptographic systems, particularly High Value Assets and systems rated FIPS 199 “High” on confidentiality. OMB stated that further migration guidance would follow once NIST finalized its post-quantum cryptography standards. The memorandum cited the threat of cryptanalytically relevant quantum computers and the risk of adversaries collecting encrypted data for future decryption.