The answer, up front
Manufacturers sit in long supply chains as both buyers of industrial components and suppliers to others, which puts them on both sides of the post-quantum migration. The clearest near-term signal is procurement: on July 16, 2026, the Australian Signals Directorate published guidance to help organizations judge whether their suppliers can move to quantum-resistant cryptography within recommended timeframes 1. No manufacturing-specific post-quantum study exists in the current reporting, so this picture draws on OT, supply-chain and cross-sector cost sources.
Vendor readiness becomes a procurement question
The Australian guidance offers vendor-neutral questions for procurement, contract renewals and vendor assessments, and it also helps vendors understand customer expectations and assess their own suppliers 1. For a manufacturer, that is the practical mechanism by which the migration arrives: not as a single mandate, but as a question that larger customers start asking and that flows down to component suppliers.
Why OT lifecycles drive the urgency
The Charter of Trust, a global industry body, names operational technology one of four priority areas because system lifecycles run 10 to 40 years or more, and it says manufacturing, energy, utilities and transport depend on systems that are hard to upgrade after deployment 2. It compares national deadlines clustering around 2030 to 2035 across the US, EU, UK, Australia and Singapore, and offers a six-step playbook from inventory through monitoring 2. The document carries conflicting dates between its text and filename, so cite the date with care.
The cost of waiting
Boston Consulting Group estimated in October 2025 that beginning now costs about 2.5 to 5 percent of annual IT budgets, and that waiting could double the bill 3. It puts the cost of upgrading connected-vehicle hardware and software at roughly 400 to 750 million dollars across global automakers, the closest manufacturing figure in the reporting, and notes that the EU's DORA and NIS2 impose strict encryption expectations on critical sectors 3. These are a consultancy's estimates, so treat the figures as modeled rather than measured.
What this means for manufacturers
Act on both roles at once. As a buyer, add post-quantum readiness questions to tenders and renewals using the kind of vendor-neutral checklist the Australian guidance describes. As a supplier, build the cryptographic inventory and crypto agility that your own customers will soon ask you to demonstrate.
How ArcQubit approaches it
ArcQubit treats discovery as the foundation for both sides of the chain. QuCode builds the cryptographic inventory across IT and OT, and QuTrust holds the migration plan so a manufacturer can answer a customer's readiness questions and sequence its own long-lifecycle upgrades in a defensible order.