Quantum computing is no longer a distant concern. With the European roadmap setting 2030 as the deadline for transitioning high-risk systems to Post-Quantum Cryptography (PQC), organizations need to act now. It's time for all CISOs to proactively address the "quantum shift" and consider a structured, long-term response. Let's explore the possible solutions and understand why crypto-agility is, without a doubt, the mandatory prerequisite, before detailing the steps to becoming a crypto-agile organization.