Transitioning to post-quantum cryptography will take years. Preparations must begin now and the security decisions we make today will define the resilience of our digital infrastructure for decades.