Organizations responsible for data security cannot afford to wait for quantum to arrive before building their defenses.