The next pass of the migration
Decide when this estate will be looked at again.
What can go wrong
A programme that ends when the first product ships leaves the rest of the estate with no date. One cutover is not the migration.
A stronger practice
ETSI TR 104 016, October 2024, is the programme-office version: eleven steps, repeated each year, because an estate does not move in one cut. This site does not teach the eleven step names.
The PQCC migration roadmap, May 2025, puts monitoring and evaluation last: track the migration, keep the documentation, and reassess as quantum capabilities change.
The UK NCSC timelines, modified 3 August 2026, put this on the 2031 row: refine the plan so there is a route to completion by 2035.
What to ask
What is the date of the next review, and what would make you bring it forward?
Evidence
A dated plan that still has open items.
A weak answer
"The migration project is closed."
A stronger answer
"The first pass covered the long-secrecy data. The next review is dated. Vendor answers that have not arrived are still on the sheet."
Which pass
This page is the pass after the first one. Changing algorithms again is the capability that makes a later pass possible.
Options
No new algorithm is chosen here. A later pass reads the inventory again and uses Choosing an option for anything the first pass left open.
Sources
- ETSI TR 104 016, October 2024. Report
- PQCC, PQC Migration Roadmap, May 2025. Roadmap PDF
- UK NCSC, Timelines for migration to post-quantum cryptography, modified 3 August 2026. Timelines