Mosca's inequality: if the time your data must stay secret plus the time it takes you to migrate exceeds the time until a cryptographically relevant quantum computer exists, encrypted traffic captured today is already compromised.
shelf life (15y) + migration (7y) vs Q-Day in 9y (2035)
How many years your data must stay secret after it is transmitted.
How long a full cryptographic migration across your estate realistically takes.
The year a cryptographically relevant quantum computer is assumed to exist.
Probability that your traffic is being captured today for later decryption.
Weekly analysis of standards, mandates and vendor moves so your exposure model stays current.