[{"data":1,"prerenderedAt":659},["ShallowReactive",2],{"blog-\u002Fblog\u002Fpqc-migration-roadmap":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":7,"body":8,"canonical":7,"category":586,"date":587,"description":588,"draft":589,"extension":590,"faqs":591,"findingsSource":7,"geo":604,"howto":7,"howtoTitle":7,"image":7,"industries":606,"keyFindings":7,"meta":608,"modified":609,"navigation":610,"path":611,"pullquote":7,"recommendations":7,"references":612,"related":625,"seo":643,"seoTitle":644,"signposts":7,"slug":645,"stats":646,"stem":649,"tags":650,"tldr":657,"__hash__":658},"blog\u002Fblog\u002Fpqc-migration-roadmap.md","The Post-Quantum Migration Roadmap: A Step-by-Step Plan for Enterprises","ArcQubit Team",null,{"type":9,"value":10,"toc":566},"minimark",[11,16,25,31,35,48,51,176,180,198,202,210,216,220,231,235,243,253,257,263,267,273,345,350,354,360,364,379,383,389,392,396,402,442,446,452,461,465,471,508,512,517,549,553,558],[12,13,15],"h2",{"id":14},"the-answer-up-front","The answer, up front",[17,18,19,20,24],"p",{},"A post-quantum migration plan has five steps: inventory your cryptography, prioritize by data lifespan and exposure, pilot on low-risk systems, migrate in order of risk, and verify that systems use the new algorithms. The UK NCSC expects large organizations to need two to three years for discovery and planning alone ",[21,22,23],"span",{},"1",".",[17,26,27],{},[28,29,30],"em",{},"Last verified: Sep. 29, 2026.",[12,32,34],{"id":33},"the-five-phase-roadmap","The five-phase roadmap",[17,36,37,38,41,42,44,45,24],{},"Governments agree on the order of work, even where their dates differ. OMB tells U.S. agencies to move through strategy and discovery in 2026 to 2027, pilots and early migration in 2027 to 2028, prioritized key-establishment migration in 2028 to 2030, signature migration in 2031, and full migration by 2035 ",[21,39,40],{},"2",". The NCSC sets the same shape on a UK clock: discovery by 2028, highest-priority migration by 2031, and everything by 2035 ",[21,43,23],{},". Canada describes three overlapping phases: preparation, identification, and transition ",[21,46,47],{},"3",[17,49,50],{},"The table below merges those public timelines into one plan. The owners and private-sector timeframes are our recommendation, not a mandate. Each timeframe cites the public source it follows.",[52,53,54,76],"table",{},[55,56,57],"thead",{},[58,59,60,64,67,70,73],"tr",{},[61,62,63],"th",{},"Phase",[61,65,66],{},"What happens",[61,68,69],{},"Suggested owner",[61,71,72],{},"Timeframe (our recommendation)",[61,74,75],{},"What done looks like",[77,78,79,102,119,138,159],"tbody",{},[58,80,81,85,88,91,99],{},[82,83,84],"td",{},"1. Inventory",[82,86,87],{},"Find every algorithm, key, certificate, protocol, and third-party dependency that uses public-key cryptography",[82,89,90],{},"PQC technical lead with security engineering",[82,92,93,94,96,97],{},"2026 to 2027, following OMB phase one ",[21,95,40],{}," and the NCSC 2028 discovery goal ",[21,98,23],{},[82,100,101],{},"A current inventory with an owner named for each system",[58,103,104,107,110,113,116],{},[82,105,106],{},"2. Prioritize",[82,108,109],{},"Rank systems by data shelf life, exposure, and criticality",[82,111,112],{},"CISO with data owners",[82,114,115],{},"Same window as phase one",[82,117,118],{},"A ranked list that explains why each system sits where it does",[58,120,121,124,127,130,135],{},[82,122,123],{},"3. Pilot",[82,125,126],{},"Test hybrid TLS or ML-KEM on a low-risk service and measure performance",[82,128,129],{},"Platform and architecture teams",[82,131,132,133],{},"2027 to 2028, following OMB phase two ",[21,134,40],{},[82,136,137],{},"A written result for each pilot, including latency, handshake size, and rollback",[58,139,140,143,146,149,154],{},[82,141,142],{},"4. Migrate",[82,144,145],{},"Move key establishment first, then signatures and PKI, in risk order",[82,147,148],{},"System owners with vendors",[82,150,151,152],{},"Key establishment 2028 to 2030; signatures by 2031; remainder by 2035 ",[21,153,40],{},[82,155,156,157],{},"Quantum-vulnerable algorithms disabled, isolated, or tunnelled, not just supported ",[21,158,47],{},[58,160,161,164,167,170,173],{},[82,162,163],{},"5. Verify",[82,165,166],{},"Confirm that systems negotiate the new algorithms and do not fall back; track metrics",[82,168,169],{},"Security operations",[82,171,172],{},"Continuous",[82,174,175],{},"A monitored dashboard and a re-scan schedule",[12,177,179],{"id":178},"phase-1-inventory","Phase 1: Inventory",[17,181,182,183,185,186,188,189,191,192,197],{},"Start with an initial, incomplete inventory and improve it. Canada advises teams \"to not be overwhelmed in completing the discovery and to begin with an initial, incomplete inventory with actions to iteratively improve the data\" ",[21,184,47],{},". The NCSC agrees that this phase does not need a formal asset register; it needs an understanding of what each system is and what cryptography it depends on ",[21,187,23],{},". OMB directs agencies toward automated discovery that feeds a cryptographic bill of materials ",[21,190,40],{},". ",[193,194,196],"a",{"href":195},"\u002Fblog\u002Fcryptographic-inventory-cbom","How to Build a Cryptographic Inventory",", covers the method.",[12,199,201],{"id":200},"phase-2-prioritize","Phase 2: Prioritize",[17,203,204,205,209],{},"Rank each system by three questions. How long must its data stay confidential? Could someone capture that data today and hold it for later decryption? How costly is the system to change? ",[193,206,208],{"href":207},"\u002Fblog\u002Fharvest-now-decrypt-later","Harvest Now, Decrypt Later",", gives the 10-year test for the first two.",[17,211,212,213,215],{},"For each non-commodity system, the NCSC lists five strategies: migrate in place, re-platform, retire the service, run it to end of life, or tolerate the risk ",[21,214,23],{},". Assign one strategy to each system and record the reason. Tolerating risk is a legitimate choice only when someone with authority accepts it in writing.",[12,217,219],{"id":218},"phase-3-pilot","Phase 3: Pilot",[17,221,222,223,225,226,230],{},"Pick a service where a rollback costs little, such as an internal API gateway. Canada's transition checklist names four requirements for any change: an impact assessment, a rollback playbook, a staging environment for testing, and monitoring after the change ",[21,224,47],{},". Use that list for every pilot. For internet-facing TLS, ",[193,227,229],{"href":228},"\u002Fblog\u002Fhybrid-vs-pure-post-quantum","Hybrid vs. Pure Post-Quantum Key Exchange",", explains the choice of key exchange.",[12,232,234],{"id":233},"phase-4-migrate","Phase 4: Migrate",[17,236,237,238,240,241,24],{},"Move key establishment first, because captured traffic is the harvest-now risk. Move signatures and PKI second, because a signature attack needs a working quantum computer at the moment of forgery. This order matches OMB's phases, which put key establishment in 2028 to 2030 and signatures in 2031 ",[21,239,40],{},". The NCSC expects some rarely used technologies to need longer than 2035 ",[21,242,23],{},[17,244,245,246,191,248,252],{},"Plan for co-existence. The NCSC expects organizations to run traditional and post-quantum public-key cryptography side by side for a while, which requires cryptographic agility and a clear criterion for retiring the old algorithms ",[21,247,23],{},[193,249,251],{"href":250},"\u002Fblog\u002Fcrypto-agility","Crypto-Agility",", covers the design patterns.",[12,254,256],{"id":255},"phase-5-verify","Phase 5: Verify",[17,258,259,260,262],{},"Supporting a post-quantum algorithm is not the same as using one. Canada defines completion as vulnerable algorithms being disabled, isolated, or tunnelled ",[21,261,47],{},". Check that connections negotiate the new algorithms, that no client silently falls back to the old ones, and that new systems do not reintroduce vulnerable cryptography. Re-scan on a schedule.",[12,264,266],{"id":265},"who-owns-what","Who owns what",[17,268,269,270,272],{},"OMB's sample role allocation gives a template for a private organization ",[21,271,40],{},":",[52,274,275,287],{},[55,276,277],{},[58,278,279,282],{},[61,280,281],{},"Role",[61,283,284,285],{},"Responsibility in the OMB memo ",[21,286,40],{},[77,288,289,297,305,313,321,329,337],{},[58,290,291,294],{},[82,292,293],{},"CIO and CISO",[82,295,296],{},"Accountable for prioritization, risk acceptance, and resource allocation",[58,298,299,302],{},[82,300,301],{},"Program office or requirement owner",[82,303,304],{},"Ensures vendor requirements include PQC readiness and crypto agility provisions",[58,306,307,310],{},[82,308,309],{},"CFO",[82,311,312],{},"Works with the CIO and CISO so migration resource requirements are accurately represented",[58,314,315,318],{},[82,316,317],{},"PQC migration program manager",[82,319,320],{},"Coordinates migration activities across the organization and reports to senior leadership",[58,322,323,326],{},[82,324,325],{},"PQC technical lead",[82,327,328],{},"Oversees inventory, algorithm selection, testing, and deployment",[58,330,331,334],{},[82,332,333],{},"Security architect",[82,335,336],{},"Integrates PQC into zero trust components and supports interoperability planning",[58,338,339,342],{},[82,340,341],{},"Application and system owners",[82,343,344],{},"Implement crypto agile and PQC-compatible technologies",[17,346,347,348,24],{},"Canada names two comparable roles: an executive lead and a technical lead ",[21,349,47],{},[12,351,353],{"id":352},"what-your-written-plan-should-contain","What your written plan should contain",[17,355,356,357,359],{},"OMB requires an initial agency plan to include nine elements ",[21,358,40],{},". A private-sector plan benefits from the same list: a system prioritization strategy with risk-based justification; timelines and milestones for all migration phases; timelines for TLS 1.3 support; the methods and automated tools used for inventory; a plan for a crypto agile architecture; a third-party coordination plan; an estimate of funding and personnel; a risk management strategy for the migration period; and a section on governance roles.",[12,361,363],{"id":362},"where-the-deadlines-come-from","Where the deadlines come from",[17,365,366,367,191,370,374,375,24],{},"The U.S. executive order sets end-of-2030 and end-of-2031 targets for federal key establishment and signatures on the highest-priority systems ",[21,368,369],{},"4",[193,371,373],{"href":372},"\u002Fblog\u002Fpqc-mandates-deadlines","Global Post-Quantum Mandates and Deadlines",", compares all five jurisdictions. To test where you stand today, take the ",[193,376,378],{"href":377},"\u002Fblog\u002Fquantum-readiness-assessment","10-Question Readiness Self-Assessment",[12,380,382],{"id":381},"what-this-means-for-executives-and-the-board","What this means for executives and the board",[17,384,385,386,388],{},"This roadmap is a management program, not a technology project. Your board owns the risk appetite. Your CEO decides whether the program gets funding and a named leader. Your CISO owns the ranked risk list. Your CFO owns the budget line that OMB expects the CIO and CISO to represent accurately ",[21,387,40],{},". Your general counsel owns the question of what the company has promised customers and regulators about protecting long-lived data.",[17,390,391],{},"Frame the risk in one sentence: data that must stay confidential for years can be captured today and read later, so the clock starts now, not on the day a quantum computer works. Then separate what you can control from what you cannot. You control your inventory, your priorities and your vendor requirements. You do not control when your suppliers ship post-quantum support. Every phase of this roadmap reduces that dependence or makes it visible.",[12,393,395],{"id":394},"decisions-for-the-next-90-days","Decisions for the next 90 days",[17,397,398,401],{},[28,399,400],{},"ArcQubit guidance, not a mandate."," Leadership needs to make five decisions early, because each one unblocks the technical work:",[403,404,405,415,421,427,436],"ol",{},[406,407,408,412,413,24],"li",{},[409,410,411],"strong",{},"Name the accountable executive and the migration lead."," Use the role table above as a starting point ",[21,414,40],{},[406,416,417,420],{},[409,418,419],{},"Approve discovery."," Phase one needs access to code, networks, certificates and supplier lists. Your CISO cannot start without your sponsorship.",[406,422,423,426],{},[409,424,425],{},"Set the risk-acceptance rule."," Decide who may accept the risk of leaving a system on old cryptography, and require that person to sign in writing.",[406,428,429,432,433,435],{},[409,430,431],{},"Add post-quantum requirements to procurement."," OMB expects requirement owners to include PQC readiness and crypto agility provisions in vendor requirements ",[21,434,40],{},". Do the same in your contracts and renewals.",[406,437,438,441],{},[409,439,440],{},"Fund the first two phases only."," Commit to inventory and prioritization now. Let the results size the migration budget.",[12,443,445],{"id":444},"what-it-costs-to-wait","What it costs to wait",[17,447,448,449,451],{},"Waiting does not save money. It moves cost to a worse moment. Your inventory takes time because the work depends on other teams and on suppliers who answer slowly. The NCSC expects large organizations to need two to three years for discovery and planning alone ",[21,450,23],{},", so a late start compresses every later phase.",[17,453,454,455,457,458,460],{},"Waiting also leaves data exposed. Information captured now stays captured, and you cannot recall it. Supplier dependence grows too: if you add new systems without post-quantum requirements, you create more work for phase four. Finally, audit exposure rises. Public deadlines now exist ",[21,456,40],{},", ",[21,459,369],{},", and \"we have not started\" is a hard answer to give once they do.",[12,462,464],{"id":463},"how-to-brief-your-board","How to brief your board",[17,466,467,470],{},[28,468,469],{},"ArcQubit guidance."," Keep the briefing to five points:",[472,473,474,480,490,496,502],"ul",{},[406,475,476,479],{},[409,477,478],{},"The exposure:"," long-lived data is at risk from capture today, and we have identified which data that is (or we are identifying it now).",[406,481,482,485,486,457,488,24],{},[409,483,484],{},"The plan:"," five phases with named owners, following public government timelines ",[21,487,23],{},[21,489,40],{},[406,491,492,495],{},[409,493,494],{},"The ask:"," a named executive, discovery funding, and a written risk-acceptance rule.",[406,497,498,501],{},[409,499,500],{},"The dependency:"," our migration finishes when our key suppliers finish, so we are putting requirements into contracts.",[406,503,504,507],{},[409,505,506],{},"The report-back:"," a short progress view each quarter showing inventory coverage, systems ranked, pilots completed and exceptions accepted.",[12,509,511],{"id":510},"common-mistakes","Common mistakes",[17,513,514,516],{},[28,515,469],{}," Four errors recur:",[472,518,519,529,537,543],{},[406,520,521,524,525,457,527,24],{},[409,522,523],{},"Waiting for a perfect inventory."," Canada and the NCSC both say to start incomplete and improve ",[21,526,23],{},[21,528,47],{},[406,530,531,534,535,24],{},[409,532,533],{},"Treating support as completion."," A system that supports a post-quantum algorithm but negotiates the old one is not migrated ",[21,536,47],{},[406,538,539,542],{},[409,540,541],{},"Skipping the owner."," A finding with no named owner does not get fixed.",[406,544,545,548],{},[409,546,547],{},"Ignoring suppliers."," Your vendors control a large share of the timeline, so ask them for their plans early.",[12,550,552],{"id":551},"how-arcqubit-approaches-it","How ArcQubit approaches it",[17,554,555],{},[28,556,557],{},"This box describes ArcQubit's own method. Keep it separate from the guidance above.",[17,559,560,561,565],{},"ArcQubit maps this roadmap to its eight-phase Crypto Agility Lifecycle Model (CALM). The eight phases are governance and awareness, discovery and inventory, risk assessment and planning, testing and pilot execution, key establishment migration, signature migration, active migration and monitoring, and continuous crypto agility. QuCode covers governance and awareness and discovery and inventory, supports pilot testing, and returns in phase seven to re-scan as new cryptography appears. QuTrust keeps the risk assessment, action plan, and migration roadmap current, and builds crypto agility into the existing cyber program. ArcQubit sells QuCode directly as fixed-scope discovery work. ",[193,562,564],{"href":563},"\u002Fcontact","Contact ArcQubit"," to scope a discovery scan.",{"title":567,"searchDepth":568,"depth":568,"links":569},"",2,[570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585],{"id":14,"depth":568,"text":15},{"id":33,"depth":568,"text":34},{"id":178,"depth":568,"text":179},{"id":200,"depth":568,"text":201},{"id":218,"depth":568,"text":219},{"id":233,"depth":568,"text":234},{"id":255,"depth":568,"text":256},{"id":265,"depth":568,"text":266},{"id":352,"depth":568,"text":353},{"id":362,"depth":568,"text":363},{"id":381,"depth":568,"text":382},{"id":394,"depth":568,"text":395},{"id":444,"depth":568,"text":445},{"id":463,"depth":568,"text":464},{"id":510,"depth":568,"text":511},{"id":551,"depth":568,"text":552},"Security","2026-07-30","A five-phase post-quantum migration roadmap with owners, timeframes tied to OMB, NCSC and Canadian guidance, and what done looks like at each step.",false,"md",[592,595,598,601],{"q":593,"a":594},"How long does a post-quantum migration take?","The NCSC expects large organizations to need two to three years for discovery, assessment, strategy, and initial planning, and another two to three years for early migration and plan refinement [1].",{"q":596,"a":597},"What should we migrate first?","Migrate key establishment first. OMB schedules key-establishment migration for 2028 to 2030 and signature migration for 2031 [2].",{"q":599,"a":600},"Do we need a complete inventory before we start?","No. Canada advises starting with an initial, incomplete inventory and improving it, and the NCSC says a formal asset register is not required at first [1], [3].",{"q":602,"a":603},"Who should lead the migration?","Name a migration lead. OMB's role table makes the CIO and CISO accountable and assigns a program manager and a technical lead to run the work [2].",[605],"global",[607],"Cross-Sector",{},"2026-09-30",true,"\u002Fblog\u002Fpqc-migration-roadmap",[613,616,619,622],{"label":614,"url":615},"National Cyber Security Centre, \"Timelines for migration to post-quantum cryptography,\" NCSC, Mar. 20, 2025","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fpqc-migration-timelines",{"label":617,"url":618},"Office of Management and Budget, \"Execution of the Migration to Post-Quantum Cryptography,\" Memorandum M-26-15, Jun. 24, 2026","https:\u002F\u002Fwww.whitehouse.gov\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002FM-26-15-Execution-of-the-Migration-to-Post-Quantum-Cryptography.pdf",{"label":620,"url":621},"Canadian Centre for Cyber Security, \"Roadmap for the migration to post-quantum cryptography for the Government of Canada (ITSM.40.001),\" Communications Security Establishment Canada, Jun. 2025","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Froadmap-migration-post-quantum-cryptography-government-canada-itsm40001",{"label":623,"url":624},"Executive Office of the President, \"Securing the Nation Against Advanced Cryptographic Attacks,\" Executive Order 14412, 91 Fed. Reg. 38483, Jun. 25, 2026","https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2026\u002F06\u002F25\u002F2026-12909\u002Fsecuring-the-nation-against-advanced-cryptographic-attacks",[626,629,631,633,635,637,640],{"label":627,"url":628},"PQC Migration Hub: The Complete Guide","\u002Fpqc-migration",{"label":630,"url":195},"Cryptographic Inventory and CBOM",{"label":632,"url":250},"Crypto Agility",{"label":634,"url":372},"Global Mandates and Deadlines",{"label":636,"url":377},"Readiness Self-Assessment",{"label":638,"url":639},"Prioritizing the Post-Quantum Migration: What the Federal Government Already Told Us","\u002Fwhitepapers\u002Fprioritizing-pqc-migration-rand",{"label":641,"url":642},"Running Your PQC Migration From One Dashboard","\u002Fwhitepapers\u002Fpqc-migration-one-dashboard",{"title":5,"description":588},"PQC Migration Roadmap for Enterprises","pqc-migration-roadmap",[647,648],"OMB schedules key-establishment migration for 2028 to 2030, signature migration for 2031, and full migration by 2035 (OMB, 2026).","The NCSC expects large organizations to need two to three years for discovery, assessment, strategy, and initial planning (NCSC, 2025).","blog\u002Fpqc-migration-roadmap",[651,652,653,654,655,656],"PQC migration","post-quantum cryptography","cryptographic inventory","for enterprises","how-to","2035 deadline","A post-quantum migration plan has five steps: inventory your cryptography, prioritize by data lifespan and exposure, pilot on low-risk systems, migrate in order of risk, and verify that systems use the new algorithms.","-rjl_PS_nxm8U378Q-FXNTiDCPXya_SxHyCQIUeyZl0",1792182884103]