A recent executive order has formally acknowledged the looming threat of cryptographically relevant quantum computers to public-key algorithms, setting deadlines for organizations to prepare. This development does not introduce a new risk, but rather codifies the existing understanding of the industry, with standards bodies, hyperscalers, and governments having long warned of this horizon. For Chief Information Security Officers (CISOs), the key challenge lies in readiness, rather than the cryptography itself, as post-quantum cryptography (PQC) demands a proactive approach to mitigate potential disruptions1. The order essentially translates to a compliance requirement, making it essential for CISOs to assess their organization's preparedness and take necessary steps to ensure a smooth transition. Ultimately, this matters to practitioners because early assessment and preparation can provide a significant advantage in navigating the regulatory landscape and ensuring the long-term security of their organization's data.