Hi All
Yes, it may be four years away, but start the assessment, asset gathering and identify exactly where your existing cryptographic material, and key material exists within your organisation.
Use this checklist as a guide:
https://www.cybersecurity-insiders.com/quantum-computing-threats-a-how-to-guide-for-preparing-your-c...
Regards
Caute_Cautim