Energy grids, water systems, and transportation networks rely on operational technology with cryptographic dependencies that were not designed for quantum threats. NERC CIP implications, OT-specific migration timelines, and sector resilience requirements create a distinct policy challenge.
The Forum tracks PQC migration requirements for operational technology environments, sector-specific resilience mandates, critical infrastructure designation for quantum-exposed systems, and the regulatory gap between IT-focused quantum security guidance and the OT environments where implementation is most difficult.