Fast-Track Your PQC Strategy: A Template for OMB M-26-15 Readiness

The transition to Post-Quantum Cryptography (PQC) is not just a technical upgrade; it is a vital national security imperative that represents the most significant cryptographic reset in the history of the Federal Government. Driven byExecutive Order 14412andOffice of Management and Budget (OMB) M-26-15, Federal Civilian Executive Branch (FCEB) agencies face a strictOctober 22, 2026deadline to submit comprehensive PQC Migration Plans to OMB and the Office of the National Cyber Director (ONCD).

To take the heavy lifting off agency leaders facing this tight 120-day window, we developed a ready-to-useTemplate for OMB M-26-15 ReadinessandOMB M-26-15 PQC Migration Plan Instructions. Precision-engineered to align directly with the White House mandates, this template serves as a "fast-track" for federal teams. Instead of spending limited cycles building complex compliance documentation from scratch, security leaders can leverage this template to rapidly map their transition pathways and shift their focus to active discovery and remediation.

Per M-26-15, each agency’s migration plan must contain, at a minimum, nine core elements, all of which are featured in the PQC Migration Plan Template:

Agencies must specifically prioritize high impact systems, High Value Assets (HVAs), and any systems vulnerable to cryptographically relevant quantum computer (CRQC) based attacks. This includes logical access control systems based in asymmetric encryption (such as PKI) and any data expected to remain mission-sensitive through 2030.

For most agencies, the core challenge of a migration plan is uncovering "cryptographic debt,” the years of hidden, legacy encryption buried in fractured IT systems. Because this debt creates unseen risks, establishing cryptographic visibility is the primary enabler for success. Once you can see your entire environment, the path to a quantum-safe future becomes clear and manageable.

A successful migration plan depends on an agency's ability to move quickly and accurately, requiring a fundamental shift in security architecture that prioritizes active discovery over passive lists. By deploying a structured and automated methodology, agencies gain the real-time visibility necessary to:

To maximize your team’s resources, ourOMB M-26-15 PQC Migration Plan InstructionsandTemplate for OMB M-26-15 Readinessare a practical "fast-track" for building a compliant transition plan. This template provides a clear implementation methodology and a detailed checklist to ensure all required elements are addressed.

The federal mandate is driven by two specific directives that agencies must operationalize:

While this specific policy targets federal agencies, the global trend is clear: critical infrastructure operators and private sector entities should view this mandate as a strategic blueprint.

M-26-15 establishes a multi-phased timeline for agency compliance. While initial efforts focus on prioritizing HVAs and high-impact systems to mitigate immediate risk, agencies are expected to complete migration across remaining systems by 2035.

Agency heads must ensure that their submitted plans address the following nine core elements:

Quantum-Safe Security (QSS), aFedRAMP Moderate authorized tool, helps agencies move from box-checking to real operational resilience.

The transition to quantum-safe cryptography demands immediate leadership. Agencies cannot afford to delay while adversaries continue to archive sensitive data.

Don't start from scratch, fast-track your PQC strategy!

Download Instructions (PDF)Download Fillable Template (PDF)

By submitting this form, you agree to ourTerms of Useand acknowledge ourPrivacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

By submitting this form, you agree to ourTerms of Useand acknowledge ourPrivacy Statement.

By submitting this form, I understand my personal data will be processed in accordance withPalo Alto Networks Privacy StatementandTerms of Use.

Copyright © 2026 Palo Alto Networks. All Rights Reserved