[{"data":1,"prerenderedAt":130},["ShallowReactive",2],{"news-\u002Fnews\u002Fcritical-manufacturing-supplier-post-quantum-readiness":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":87,"date":88,"description":89,"draft":90,"extension":91,"faqs":8,"findingsSource":8,"geo":92,"image":8,"industries":94,"keyFindings":8,"meta":97,"modified":98,"navigation":99,"path":100,"pullquote":8,"recommendations":8,"references":101,"related":111,"seo":118,"seoTitle":119,"signposts":8,"slug":120,"stats":8,"stem":121,"tags":122,"tldr":128,"__hash__":129},"news\u002Fnews\u002Fcritical-manufacturing-supplier-post-quantum-readiness.md","Manufacturers Told to Quiz Suppliers on Post-Quantum Readiness as OT Lifecycles Stretch Decades","ArcQubit Team","",null,{"type":10,"value":11,"toc":78},"minimark",[12,17,26,30,36,40,50,54,64,68,71,75],[13,14,16],"h2",{"id":15},"the-answer-up-front","The answer, up front",[18,19,20,21,25],"p",{},"Manufacturers sit in long supply chains as both buyers of industrial components and suppliers to others, which puts them on both sides of the post-quantum migration. The clearest near-term signal is procurement: on July 16, 2026, the Australian Signals Directorate published guidance to help organizations judge whether their suppliers can move to quantum-resistant cryptography within recommended timeframes ",[22,23,24],"span",{},"1",". No manufacturing-specific post-quantum study exists in the current reporting, so this picture draws on OT, supply-chain and cross-sector cost sources.",[13,27,29],{"id":28},"vendor-readiness-becomes-a-procurement-question","Vendor readiness becomes a procurement question",[18,31,32,33,35],{},"The Australian guidance offers vendor-neutral questions for procurement, contract renewals and vendor assessments, and it also helps vendors understand customer expectations and assess their own suppliers ",[22,34,24],{},". For a manufacturer, that is the practical mechanism by which the migration arrives: not as a single mandate, but as a question that larger customers start asking and that flows down to component suppliers.",[13,37,39],{"id":38},"why-ot-lifecycles-drive-the-urgency","Why OT lifecycles drive the urgency",[18,41,42,43,46,47,49],{},"The Charter of Trust, a global industry body, names operational technology one of four priority areas because system lifecycles run 10 to 40 years or more, and it says manufacturing, energy, utilities and transport depend on systems that are hard to upgrade after deployment ",[22,44,45],{},"2",". It compares national deadlines clustering around 2030 to 2035 across the US, EU, UK, Australia and Singapore, and offers a six-step playbook from inventory through monitoring ",[22,48,45],{},". The document carries conflicting dates between its text and filename, so cite the date with care.",[13,51,53],{"id":52},"the-cost-of-waiting","The cost of waiting",[18,55,56,57,60,61,63],{},"Boston Consulting Group estimated in October 2025 that beginning now costs about 2.5 to 5 percent of annual IT budgets, and that waiting could double the bill ",[22,58,59],{},"3",". It puts the cost of upgrading connected-vehicle hardware and software at roughly 400 to 750 million dollars across global automakers, the closest manufacturing figure in the reporting, and notes that the EU's DORA and NIS2 impose strict encryption expectations on critical sectors ",[22,62,59],{},". These are a consultancy's estimates, so treat the figures as modeled rather than measured.",[13,65,67],{"id":66},"what-this-means-for-manufacturers","What this means for manufacturers",[18,69,70],{},"Act on both roles at once. As a buyer, add post-quantum readiness questions to tenders and renewals using the kind of vendor-neutral checklist the Australian guidance describes. As a supplier, build the cryptographic inventory and crypto agility that your own customers will soon ask you to demonstrate.",[13,72,74],{"id":73},"how-arcqubit-approaches-it","How ArcQubit approaches it",[18,76,77],{},"ArcQubit treats discovery as the foundation for both sides of the chain. QuCode builds the cryptographic inventory across IT and OT, and QuTrust holds the migration plan so a manufacturer can answer a customer's readiness questions and sequence its own long-lifecycle upgrades in a defensible order.",{"title":7,"searchDepth":79,"depth":79,"links":80},2,[81,82,83,84,85,86],{"id":15,"depth":79,"text":16},{"id":28,"depth":79,"text":29},{"id":38,"depth":79,"text":39},{"id":52,"depth":79,"text":53},{"id":66,"depth":79,"text":67},{"id":73,"depth":79,"text":74},"Analysis","2026-07-16","Australia's ASD issued vendor-readiness questions for procurement, and industry groups flag 10-40 year OT lifecycles. Manufacturers sit on both sides of the supply chain.",false,"md",[93],"canberra",[95,96],"Cross-Sector","Critical Manufacturing",{},"2026-09-04",true,"\u002Fnews\u002Fcritical-manufacturing-supplier-post-quantum-readiness",[102,105,108],{"label":103,"url":104},"Australian Signals Directorate, \"New guidance helps organisations assess vendor readiness for post-quantum cryptography,\" cyber.gov.au, Jul. 16, 2026.","https:\u002F\u002Fwww.cyber.gov.au\u002Fabout-us\u002Fview-all-content\u002Fnews\u002Fnew-guidance-helps-organisations-assess-vendor-readiness-for-post-quantum-cryptography",{"label":106,"url":107},"Charter of Trust PQC Working Group, \"Decrypting the Future: Global Timelines for Post-Quantum Cryptography and Why They Matter,\" Apr. 7, 2026.","https:\u002F\u002Fwww.charteroftrust.com\u002Fwp-content\u002Fuploads\u002F2026\u002F04\u002F20260115_PQC-Decrypting-the-Future_FINAL-1.pdf",{"label":109,"url":110},"J.-F. Bobier et al., \"How quantum computing will upend cybersecurity,\" Boston Consulting Group, Oct. 15, 2025.","https:\u002F\u002Fwww.bcg.com\u002Fpublications\u002F2025\u002Fhow-quantum-computing-will-upend-cybersecurity",[112,115],{"label":113,"url":114},"CISA Warns Industrial Operators That Quantum Risk Hits Plant Systems Hardest","\u002Fnews\u002Fcisa-operational-technology-post-quantum",{"label":116,"url":117},"Where to Start a PQC Migration","\u002Fblog\u002Fpqc-migration-where-to-start",{"title":5,"description":89},"Manufacturers Told to Vet Supplier PQC","critical-manufacturing-supplier-post-quantum-readiness","news\u002Fcritical-manufacturing-supplier-post-quantum-readiness",[123,124,125,126,127],"operational technology","supply chain","critical infrastructure","PQC migration","for enterprises","Australia's signals directorate published vendor-readiness questions for procurement, and an industry body names operational technology a priority because system lifecycles run 10 to 40 years, which puts manufacturers on both sides of the supply-chain migration problem.","EKgq0c6Yk1hehHv6oyJI4uSAklS4Uo3_fKLhzPKf88g",1792182885284]