NSA Guidance for Transition to Quantum-Resistant Cryptography R-VENDOR: R-VENDOR Engage technology vendors on their quantum-readiness roadmaps, with dates and costs per COTS product

Organizations should engage their technology vendors, for on-premises commercial products and cloud-based products alike, about the vendors' quantum-readiness roadmaps: how and when they will test PQC algorithms and integrate them into products, ideally in a published roadmap. For each commercial product the organization's roadmap should record when and how the vendor plans to deliver PQC updates or upgrades and the expected cost of the migration, treating migration as IT and OT modernization.