Post-quantum readiness is now a regulatory and operational priority, and the biggest risk is already here: adversaries are collecting encrypted data today to decrypt it later (“harvest now, decrypt later”). This checklist helps you assess where your organization stands against NIST’s post-quantum standards, find your visibility, vendor, and ownership gaps, and turn your score into a clear, phased roadmap.

Readers will learn:

• How to protect long-lived sensitive data, such as intellectual property and regulated customer information, from harvest now, decrypt later (HNDL) risk;
• How to align with NIST’s PQC standards (FIPS 203, 204, 205), US Executive Order 14412, and EU DORA;
• How to score your readiness across 8 categories (86 points total) and find out whether to focus on discovery, tactical planning, or governance;
• How to build a repeatable operating model for cryptographic agility, so you can update encryption and policies as standards evolve.