Post-quantum encryption is the deadline nobody is preparing for

The strange thing about quantum risk: the harvest-now-decrypt-later attack means data stolen TODAY is already exposed to a computer that does not exist yet. Migration to post-quantum standards takes years, and most companies have not started. The machines may be a decade away; the deadline is not. Anyone here actually working on a migration?