Every PQC deadline, on one clock.

Manufacturers must report actively exploited vulnerabilities and severe incidents — the CRA’s first binding obligations.

FIPS 140-2 modules leave the active list — procurement against them ends for US federal systems.

Products with digital elements sold in the EU carry security and vulnerability-handling obligations — cryptographic hygiene included.

NSA guidance expects operating systems in national-security service to support and prefer CNSA 2.0 algorithms (ML-KEM, ML-DSA) by end-2027.

NCSC’s published timeline expects full cryptographic discovery and a funded transition plan by 2028.

Under NIST’s initial public draft, RSA-2048-class security moves to deprecated status — permitted, but flagged, ahead of the proposed 2035 disallow.

The EU coordinated PQC roadmap expects high-risk systems migrated by the end of 2030.

The most critical cryptography — long-shelf-life data, root keys, CA infrastructure — migrated by 2031.

NSA’s completion target: CNSA 2.0 as the baseline across NSS, with classical-only deployments needing explicit waivers.

Proposed in NIST’s initial public draft: RSA-2048-class cryptography disallowed for US federal use — the anchor date most global programs plan against.

All remaining systems quantum-safe by 2035 under the NCSC timeline.

Gulf and Jordanian supervisors are folding cryptographic inventories and PQC transition roadmaps into reviews on rolling, institution-specific timelines.