Regulatory and supervisory perspectives

Regulators focus on risk management, resilience, and anticipation, not prescribed algorithms. PQC is treated as an emerging long-term risk, relevant for critical infrastructure. They expect awareness, structured analysis, and documented decision-making — not generally immediate technical migration.