
Aleksandra Sagan of The Logic
reports B.C. pension fund manager creates joint venture to use quantum tech for better investing:
British Columbia Investment Management Corp. said
Monday it has joined forces with Quantum Algorithms Institute, a
B.C.-based non-profit working to accelerate the adoption of quantum
technologies. CEO Gordon J. Fyfe said QAI will help it “prepare for the
risks and opportunities ahead.” (The Logic)
Talking point: The
two will identify ways to optimize BCI’s portfolio, risk assessment and
financial modelling with quantum technologies, as well as improve
security standards. The latter has been a focus for BCI for some time.
BCI said in its most recent annual report that it is “preparing… to be
post-quantum ready, ensuring our data and systems remain secure.” BCI,
which manages investments for 32 public sector clients such as pension
funds, has $295 billion in gross assets under management, according to its most recent annual report. It has invested in quantum tech previously, backing B.C.-based Photonic Inc. since 2021.
Bloomberg also covered this story here.
On Monday, BCI issued a press release to state that in has entered into a joint venture with QAI to be "post-quantum ready":
Joint initiative reinforces British Columbia as a hub for quantum innovation in Canada
VICTORIA, BC – November 17, 2025 – British
Columbia Investment Management Corporation (BCI), one of Canada’s
largest institutional investors, and the Quantum Algorithms Institute (QAI),
a non-profit organization supporting adoption of quantum technologies
in British Columbia, today announced a joint initiative to advance
post-quantum readiness.
“Working with QAI gives us access to world-class quantum expertise as we prepare for the risks and opportunities ahead,” said Gordon J. Fyfe,
Chief Executive Officer and Chief Investment Officer at BCI. “Quantum
computing will impact how investors around the world protect systems and
approach complex investment scenarios. We are positioning BCI to
leverage this technology for business advantage as it becomes more
widely available.”
Together, BCI and QAI will work to
identify quantum investment applications for portfolio optimization,
risk assessment, and financial modeling, while implementing post-quantum
security standards to support BCI’s long-term operational resilience.
QAI will use the insights gained through this hands-on experience to
support quantum preparedness across British Columbia and Canada’s
business ecosystems.
“With quantum computers expected to be
commercially viable within three to five years, this collaboration will
offer critical learnings that extend beyond BCI,” said Louise Turner,
Chief Executive Officer of QAI. “We’re developing playbooks and use
cases that can help other organizations – from governments to small
businesses – build their own quantum readiness.”
BCI’s quantum experience extends beyond operations to its global portfolio. This includes investments like Photonic Inc.,
a British Columbia-based quantum computing company backed since 2021,
which offered early insight into the technology’s evolution and
commercial potential. The joint initiative with QAI builds on this
strong foundation and BCI’s broader commitment to accelerating
innovation.
I suggest you visit Quantum Algorithms Institute's site to understand what they are doing and how they can help BCI improve its investment operations, bolster its investment and operational risk management.
Before you dismiss this as a bunch of quantum computing malarkey which admittedly was my first impulse, I invite you to read this KPMG insight paper on data safety in the quantum computing age:
Today’s world runs on data, from emails and passwords to
financial and medical records, from factories, schools and armies to
energy grids and telecommunications networks. And encryption protects
this data, preventing criminals and hackers and other bad actors from
getting their hands on this precious resource.
While cracking
encryption would take a traditional computer billions of years, with the
emergence of quantum computing these codes could potentially be broken
in hours. It is possible that encrypted data may have already been
stolen, with the anticipation that in the next decade or so, quantum
computers might be able to decrypt this information. That’s a concerning
prospect when you consider that certain types of data should be kept
secure for many years or decades. These include health records and
financial information, defense designs, autonomous systems and critical
infrastructure, like payment systems, telecommunications and energy
supply.
Misuse of data has a real-world impact on people. When
hackers are able to steal individuals’ identities to misdirect payments
(such as house deposits or salaries), apply for credit cards or
passports, or file for government benefits, the impacts to respective
financial systems could stretch to trillions of dollars. Organizations
could fall prey to phishing and malware attacks, leading to business
interruption, ransoms and negative publicity.
This is not a future
problem but an immediate issue. On the one hand, numerous governments,
companies and researchers are racing to scale up their quantum computing
systems, with many technology companies producing quantum roadmaps
towards large, error-corrected quantum computers. On the other hand,
these organizations are also seeking smart ways to make it harder to
crack encryption, by producing quantum-safe cryptosystems. Nor is it
just a technological threat; there are likely to be regulations that
could leave organizations facing penalties for failing to meet
encryption standards, as well as being locked out of defense, national
security, health and government contracts, as procurement requirements
are updated.
In the US, for example, the Quantum Computing Cybersecurity Preparedness Actopens in a new tab requires federal government agencies to “adopt technology that will protect against quantum computing attacks.”1 The Australian Signals Directorate (ASD) has updated its guidelines for cryptography and information security.2,3
And in February 2025, Europol hosted a Quantum Safe Financial Forum
(QSFF) event, calling on financial institutions and policymakers to
prioritize the transition to quantum-safe cryptography.4
Which has been followed by a European Commission transition timeline
for critical infrastructure, starting in 2026 and to be completed by
2030.5
As quantum computing evolves, and the cyber threat increases, we can
expect to see an increase in industry-specific frameworks, regulations,
and best practice guidelines.
Creating a quantum-resilient organization
Encryption is typically implemented by internal IT teams, cloud
and software providers. However, despite being totally reliant on
encryption, many organizations know relatively little about how and
where the data they use is encrypted. This magnifies the challenge of
quantum resilience, which now calls for an understanding of both your
own cryptographic implementation as well as all dependent systems.
To
protect against quantum cyber risk, organizations should adopt
post-quantum cryptography (PQC) algorithms, which resist the efforts of
powerful quantum computers. The US National Institute of Standards and
Technology (NIST) has already made such algorithms available.
Transitioning to PQC is a major effort over several years, involving the
entire enterprise — not just IT — preferably overseen by a
cross-organizational encryption leader.
PQC algorithms would need
to be implemented in various software solutions, including key
libraries, digital signatures and authentication. Given the scale of the
task, it’s important to broaden cyber expertise, plan budgets, and
empower teams to manage this increasing risk, as part of a multi-year
transition effort.
Organizations should aim to build a
cryptographic bill of materials (CBOM), to better understand what
encryption is being used, and where. The CBOM lists all the
cryptographic assets employed across software (including
software-as-a-service), services, and infrastructure — within the
enterprise and across the supply chain. It’s also vital to assess the
level of risk of each asset, to prioritize high-value data — which
varies between sectors. For consumer companies, for example, customer
data is paramount; in life sciences, intellectual property is especially
valuable. Other organizations may be keen to protect financial,
operational, and employee information.
These key efforts support
the development of a roadmap for discovery, assessment, management,
remediation and monitoring the transition to quantum resilience, and
coping with ongoing risk. This requires coordination across the IT
estate. With so many players involved in encryption, contractual
agreements with third parties should specify appropriate levels of
quantum cybersecurity and clarify how the PQC transition can be
harmonized. Procurement strategies, whether for devices or software,
should also be updated to include quantum-resistant technologies, so
that these IT investments can support PQC requirements during their
lifetime.
As is already the case it's vital to review data
retention policies, to reduce the time that sensitive data is stored and
only retain data that’s absolutely necessary, while deleting data no
longer needed. To maintain operational continuity, organizations should
make appropriate enhancements to security controls (based upon their
unique risk profile) to integrate PQC, and to select and test
quantum-safe, cryptographically agile solutions in their IT
infrastructure, ahead of full deployment.
Get started
It is not yet a full quantum computing world, but it soon will
be. As they prepare to adopt PQC, IT leaders should be aware that this
is not a standalone project but a transition to a new business-as-usual.
It will take several years and impact the entire enterprise, calling
for multiple internal and external stakeholders to build a willing
coalition. With bad actors always seeking to find ways to break
encryption, organizations should continually re-evaluate their defenses.
Getting started now, with a carefully managed plan for PQC transition,
can help to keep one step ahead, maintain resilience and operations,
with safe, secure, data.
What this tells me is quantum computing is already here, you need to prepare for consequences, thinking strategically to play good defence and offence (seizing opportunities as they arise).
Will BCI's joint venture with QAI make it quantum prepared? I have no idea, at least they got the ball rolling here and other large pension funds will surely follow.
Lastly, if BCI can afford quantum computing, it can afford to pay its tab for Pension Pulse (just sayin').
Below, within a decade, quantum computers will be able to break virtually any
encryption algorithm in use today. What used to be science fiction is on
its way to becoming a commercial reality. Once that happens, quantum
computers will be able to crack in minutes what was supposed to be
unbreakable for more than a century using the most powerful computers
available.
Erik Wood, senior director of cryptography and product
security at Infineon, talks about cryptographically relevant computers,
how they work, and how that will affect computer architectures and chip
design
Recent comments