Post-quantum cryptography may still be a developing issue, but critical infrastructure operators should start preparing now before the transition becomes an urgent requirement.