Hall 5 · Exhibit 3 1 min
Global Regulatory Convergence
2030 and 2035: the deadlines everyone agrees on
Critical infrastructure2030
Full migration2035
First deliverableCryptographic inventory
EU on HNDL'Likely occurring already now'
Try it yourself
Threat Timeline
Scrub a cursor through 2020–2040 and watch milestones light up.
Major Western regulators have converged on two deadlines: 2030 for critical infrastructure and 2035 for full migration.
| Jurisdiction | Key Mandates | Timeline |
|---|---|---|
| United States (NIST/NSA) | FIPS 203–205; NIST IR 8547; CNSA 2.0 | Firmware 2030. All systems 2033. Full migration 2035. |
| United States (Exec.) | NSM-10; OMB M-23-02; EO 14144 (TLS 1.3) | Federal TLS 1.3 by Jan 2030 |
| United Kingdom | Three-phase NCSC migration plan | Discovery to 2028. High priority 2028–2031. Complete 2031–2035. |
| European Union | NIS2 PQC mandate; HNDL 'likely now' | Critical by 2030. All by 2035. |
| Others | UAE, Australia ASD, Singapore MAS, HK HKMA | Converging on 2030–2035 |
Scrub to 2030 on the threat timeline
Cursor pre-set to 2030 with the regulation filter active.
Key Takeaways
- Major regulators converge on 2030 for critical infrastructure, 2035 for full migration
- Every regulator requires cryptographic inventory as the first deliverable
- The EU recognizes HNDL as 'likely occurring already now'