PQC readiness checklist for software estates

Use this checklist to move from vague PQC concern to a first governed posture baseline with standards-derived policy, CI evaluation, and evidence tracking.

Page purpose

Capture teams starting PQC planning who need practical migration steps and a clear conversion path into assessment.

Checklist message

Move from concern to an actionable migration baseline that can be measured, governed, and evidenced over time.

Conversion paths

  • View and use the checklist.
  • Start your first repo or service baseline.
  • Request a guided readiness pilot.

Checklist

  • Define policy ownership and governance responsibilities.
  • Baseline inventory and posture across repos, services, and infrastructure in scope.
  • Assess TLS, PKI, and classical public-key cryptography exposures.
  • Translate standards into policy profiles and PQC overlays.
  • Evaluate posture changes continuously in CI and PR workflows.
  • Track exceptions, evidence, and migration reporting over time.