Federal Acquisition Regulation. The rulebook that governs what every company selling to the federal government has to do. When FAR moves, primes move. When primes move, their supply chains move.
A practice means repeatable methodology, a defined service catalog, and the technical credibility to deliver consistent work across multiple clients without rebuilding from scratch each time.
On June 29 NIST stood up the Quantum Manufacturing Engineering Center with SRI International. Twenty million dollars to start.
There is no certification, no audit body, and no regulatory definition that qualifies a product as quantum-safe. Any vendor using that phrase on a slide deck without naming a specific NIST standard and a specific implementation timeline is telling you nothing.
“What happens when the standard changes? Are we going to have to do this again in five years?"
Carriers are watching. The same way they watched multi-factor authentication for two years before it became a hard underwriting requirement around 2021.
"Hold on. We already pay you for managed services. This PQC migration should be included in the current SLA."
The heat map came back red.It always does. That is not a bad outcome. That is the beginning of a billable relationship.
"Whoa, whoa, whoa, we don't do cybersecurity. That is on the customer. We have it written right in our SLA." I heard that line verbatim from dozens of owners. Amazing how far the channel has come.
