Blindspots and breakthroughs: Securing sovereign intellectual property at the AI-Quantum nexus

The convergence of Artificial Intelligence (AI) and Quantum Computing has moved beyond theoretical risk to become the primary front of strategic competition and economic statecraft. 

In March 2026, a joint directive from the NSA and the Australian Signals Directorate (ASD) reframed AI as a critical supply chain. This landmark shift acknowledges that the integrity of training data and cryptographic foundations are now the center of gravity for geopolitical sovereignty and national resilience. For enterprises and government agencies alike, the challenge is no longer just preventing a breach, but ensuring the long-term viability of the digital assets that underpin the national economy.

This panel presents a practical framework for navigating this dual-threat landscape through quantum resilience, AI security posture management, and rigorous data provenance. Participants will walk away with a unified framework for ensuring enterprise viability through three pillars:

• AI Provenance, Law, and Governance:​ We examine the March 2026 NSA/ASD guidance through the lens of emerging legal frameworks and expanded legal liabilities from the incorporation of AI into the digital ecosystem. We expand on the new concept of AI Training Data Bill of Materials (AI TD-BOM) as a mandatory governance standard. This methodology is critical to detect and neutralize poisoned datasets before they compromise autonomous decision-making in critical infrastructure. We will specifically address the evolving legal duty of care for boards and executives to ensure that their AI-driven intellectual property is built on a verified, tamper-proof, and legally defensible foundation.
• The 2030 Quantum Triage:​ Under AUKUS Pillar II, the ASD has mandated refined PQC transition plans by the end of 2026, targeting full migration by 2030. We review cryptographic discovery techniques, specifically the LATICE framework (Locate, Assess, Triage, Implement, Certify, Evolve) to identify "harvest now, decrypt later" vulnerabilities. This intelligence provides a technical and legal perspective on how international defence governments are leveraging post-quantum resilience for data hardening, and how enterprises are protecting decades of legacy IP and trade secrets from being exposed by quantum-enabled adversaries.
• Trust Architectures at the Nexus:​ The most underexamined risk in this landscape is not AI data integrity or quantum decryption in isolation. It is what happens when both fail simultaneously in the same system. We examine how crypto-agile AI models are emerging as the architectural response to this convergence, enabling organisations to swap cryptographic primitives without rebuilding the inference stack. We address the device visibility gap: without continuous, vendor-agnostic asset inventory across IT, OT, and IoT environments, neither PQC migration nor an AI TD-BOM audit can be completed with integrity. This pillar closes with the governance question executives are not yet asking: who owns the trust architecture and what is the liability exposure when no one does?

This is a threat-forward examination of the governance mandates, evolving case law, and technical practices required to protect both public and private sectors. Attendees will leave with concrete, jurisdiction-specific guidance on AI data integrity, PQC transition planning, and the board-level accountability frameworks that are now inseparable from both.