What’s it going to take to prod organizations to implement a post-quantum security plan? Legislative pressure.