The Hong Kong Monetary Authority (HKMA), together with The Hong Kong University of Science and Technology (HKUST), has launched a Post-Quantum Cryptography (PQC) Toolkit to give licensed banks a framework for moving away from classical public-key encryption. The toolkit was announced at the HKMA’s FiNETech8 forum and responds to a baseline audit in July 2026 that showed the sector’s average Quantum Preparedness Index (QPI) was only 2.3 out of 10. It outlines a roadmap to raise every regulated institution to a QPI score of 10.0 by 2030, covering cryptographic inventory, risk prioritization, supply-chain engagement and governance architecture. The framework also provides templates for auditing third-party software, HSM vendors and cloud providers, and will be updated as international standards such as NIST’s post-quantum parameters evolve. 1