Migrating to quantum resistant algorithms will take years to integrate into existing systems and processes. Organisations need to achieve crypto-agility – the ability to change, improve, and revoke cryptographic assets to successfully deal with quantum threats.