The report offers a structured methodology that helps financial institutions assess quantum-related risks, categorise systems by sensitivity and determine migration priorities for post-quantum cryptography based on impact and complexity. It also highlights “no-regret” actions such as adopting hybrid cryptographic solutions, retiring outdated algorithms and coordinating across organisations and vendors to build resilient, future-proof encryption practices.