Cybersecurity software.

ENISA and NIST have both published post-quantum cryptography standards, and the migration clock is already running for critical infrastructure operators even though a cryptographically relevant quantum computer doesn't exist yet — the risk is “harvest now, decrypt later,” where encrypted traffic captured today gets stored until a future quantum computer can break it. Long-lived secrets — health records, state data, infrastructure credentials — are exposed regardless of when the hardware actually arrives.

The audit problem is largely inventory: most organisations don't have a reliable map of where RSA and ECC are actually used across TLS termination points, VPNs, code-signing pipelines, and embedded devices with infrequent update cycles. A migration plan has to sequence those systems by exposure and update difficulty, since hybrid classical-PQC TLS is available today but embedded and long-lifecycle hardware will lag years behind server infrastructure.