Integrating post-quantum into third-party risk management

Add PQC questions to vendor assessments, tag suppliers with long-term data exposure, align with procurement and contract reviews. Integration uses existing governance, supports audit traceability and proportional response.