Last reviewed 10 November 2026
Ask a supplier
This route is a shortcut across the four situation routes when the next step is to ask a supplier.
Prepare each question so it names the product, the cryptographic construction you need, and the date you need an answer by. When an answer is vague, missing, or concerning, follow up in writing, record the judgement, and name who will escalate if the supplier does not answer. When the answer is complete enough to act on, record the decision in the log and link the source.
Authority recommendation: The end of 2030 milestone in the Post-quantum questions to ask your vendors guide, updated 5 November 2026, is ASD's planning milestone for its own audience, not a universal deadline.
The CISA, NSA, and NIST fact sheet, as of 17 August 2023, remains the short official starting point for what to ask.
Read in this order:
The output is one decision-ready row in the vendor response log.
Primary next page: Vendor plan.
Sources
- ASD and ACSC, with CISA and NSA, Post-quantum questions to ask your vendors, updated 5 November 2026. Vendor guide
- CISA, NSA, and NIST, Quantum-Readiness fact sheet, as of 17 August 2023. Fact sheet