How CISOs Prioritise Critical Infrastructure in PQC Migration

Nobody migrates every system to post-quantum cryptography in one go. A large estate takes three to five years, legacy takes longer, and only so many people can do the work. So the real decision for a CISO is the order. Get the first twenty systems right and most of the live risk is gone. Get it wrong and the dangerous ones sit in the queue until year five.

Below is a method for ranking critical infrastructure, the deadlines that shape it, and what India's leaders said when QShield 2.0 launched in Bengaluru on 19 September 2026.

Quick answer: Rank each critical system on five things: how long its data has to stay secret, how easily an attacker can capture its traffic or backups today, how long the system will live and how hard it is to change, what breaks if trust in it fails, and whether its algorithms can be swapped without a rebuild. Long-life data on exposed links goes first, along with PKI and key custody. High-impact operational systems come next, then everything else. India's roadmap gives critical sectors 2027 to prepare, 2028 to migrate high-priority systems and 2029 to reach full scale.

Why Does the Order of Migration Matter More Than the Speed?

Starting with whatever is easiest feels productive. It also leaves the worst exposure for last. The usual way to frame the urgency is Mosca's inequality: add the years your data must stay secret to the years your migration will take, and if the total is longer than the time until a capable quantum computer arrives, you are late already. Attackers can record encrypted traffic now and decrypt it later, so data with a long life is exposed today, whatever the state of the hardware.

A short list of the right systems finished early removes more risk than a broad programme that reaches the critical few in year five.

Which Deadlines Shape the Priority List?

Regulators have not settled on one date, but they agree on the sequence.

Read down the right-hand column and the order never changes. Find what you have, move the high-priority systems, then finish the rest. At the PQC Migration Workshop at Pragati Q-Foundry 2026, one slide put a number on the cost of waiting. Organisations that have not started inventory by 2026 will miss the 2030 network equipment deadline in the US CNSA 2.0 timeline, because migration usually takes three to five years.

What Five Factors Decide Which Systems Go First?

Score each critical system from 1 to 5 on the factors below, double the weight of data life and exposure, and rank the totals. That is a practical method and not a published standard, so adjust the weights for your sector.

Data life and exposure carry the double weight because together they describe harvest-now, decrypt-later risk, the part of the threat that is live today.

Which Critical Infrastructure Sectors Face the Highest Risk?

A risk matrix shown at the Pragati workshop plotted industries by how long their data lives against how long their systems live. Insurance, banking and the public sector landed in the top band, marked as at risk before about 2025. The slides gave the reasons in plain figures:

• Banking: mortgage registers are kept for 30 years, fraud registers permanently, and applications can stay in production for up to 30 years.
• Public sector: GST and income tax portals hold data for multiple decades.
• Health: patient records are maintained for ten years or more, and hospitals rarely update their information systems.
• Automotive: software takes five years to develop and runs for ten, and use may stretch another ten.

Energy, telecom and other operational technology environments share the same shape: long-lived systems with cryptography that is hard to change. We cover that in OT Was Built to Last. Its Cryptography Wasn't. and, for payments, in When a Central Bank Says "The Time Has Come".

What Does a Practical Migration Sequence Look Like?

Four waves, lined up with India's roadmap, suit most critical operators.

1. Wave 0, discover and classify (now to 2027). Build the cryptographic inventory and score every asset on the five factors. India's roadmap calls the 2027 phase preparation: discovery, quantum risk assessment, classification into high, medium and low, and pilots.
2. Wave 1, root trust and long-life data (2027 to 2028). Certificate authorities, key custody and the stores of long-life records move first. If trust fails here, everything beneath it fails with it.
3. Wave 2, high-impact operational systems (2028 to 2029). Payments, control networks, identity and citizen-facing services. Use hybrid cryptography where vendors are not ready.
4. Wave 3, the long tail (2029 onwards). Remaining systems, continuous monitoring, and retirement of legacy algorithms ahead of the 2030 and 2035 NIST dates.

Procurement helps throughout. India's short-term actions include common PQC procurement guidelines with mandatory bills of materials for government RFPs, which means every new purchase either helps the migration or adds to it.

What Are India's Leaders Saying About Quantum-Safe Readiness?

At the QShield 2.0 launch on 19 September 2026, speakers from the state government, the National Quantum Mission and NITI Aayog were direct about where this is heading.

• Priyank Kharge, Karnataka's Minister for IT, Biotechnology and e-Governance, said that as quantum moves into practical use, "cybersecurity will be one of the most critical areas of this transition." Organisations, he added, need visibility into their cryptographic infrastructure and the ability to assess and strengthen it continuously.
• Dr Ajai Chowdhry, Chairman of the Mission Governing Board of the National Quantum Mission, framed the aim as capability that is "indigenous, sovereign, and ready before the deadline arrives, not after."
• Prof. Abhay Karandikar, Member of NITI Aayog and former Secretary of the Department of Science and Technology, said NITI Aayog is developing a quantum communication risk-assessment framework with the RBI, SEBI and TRAI. As QNu reported from his remarks, regulators could start asking banks, stock exchanges and telecom companies whether quantum-safe frameworks are actually deployed. Earlier this year he called India's 1,000 km quantum communication demonstration "a landmark advancement in secure quantum communication."
• Dr Ajay Dharam Singh, Karnataka's Minister for Science and Technology, said QNu's decade reflects "indigenous innovation and technological self-reliance," and that Karnataka's quantum push is built around Technology with Responsibility.

Karandikar's remark matters most for a CISO's desk. Once a regulator can ask whether quantum-safe controls are deployed, an inventory and a ranked plan are the evidence you will be asked to produce.

How Does QShield 2.0 Support This Prioritisation?

QShield 2.0 is QNu Labs' sovereign post-quantum platform, and the sequence above maps onto it fairly directly. Its framework, NCAAF (the National Cryptographic Assessment and Assurance Framework), runs three continuous processes: Discover, Assess and Assure.

• Quantum Readiness Risk Assessment finds every certificate, key and algorithm, scores each by exposure and breach impact, and puts the riskiest systems first in line for migration. It covers Wave 0 and the scoring step.
• Quantum PKI issues certificates and manages identity so trust holds while signing algorithms change. That helps with Wave 1, because there is no system-wide cutover.
• Quantum Vault protects keys, secrets and long-life records from attackers who record now and decrypt later.
• Quantum Entropy supplies randomness from physics as the start of every key.
• AI Security brings AI models, pipelines and agent identity under the same assurance as they enter critical workflows.

It can run on-premises or air-gapped, which keeps the root of trust in your own hands. Rahil Patel, QNu's CGO, said at the launch that customers kept asking one question before any other: "where does your cryptography actually live." For the full comparison with the original platform, read QShield vs. QShield 2.0, or request a demo and run discovery on your own estate.