RESOURCE
The Cyber Centre's plain-language starting point for Canadian organizations: why harvest now, decrypt later is a present-day risk, and the first steps toward a cryptographic inventory and migration plan.
Canadian Centre for Cyber Security
ITSAP.00.017 is the Cyber Centre's short guidance for organizations that have not yet started. It explains the two quantum era risks in plain terms: data captured today and decrypted later, and forged authentication once a capable quantum computer exists.
Its recommended first moves are the same ones the G7 call to action repeats: build a cryptographic inventory, plan IT lifecycle updates around post-quantum algorithms, and treat the migration as a multi year program rather than a product purchase.
This is the one page to hand your executive team. It says the migration is a multi year program, not a purchase, and that the first step is an inventory. Add one question the guidance leaves to you: how long will the equipment on each end of the link stay in service? Long lived equipment carries long lived secrets, and that is what sets your priority order.
Start with a conversation about your cryptographic posture.