Two clocks are running at once. Q-Day is when quantum computers break today's encryption, and under the EU's roadmap, high-risk use cases come off quantum-vulnerable crypto by 2030. The other clock is AI: attackers run reconnaissance and lateral movement through agents faster than any human team. These things compound: HNDL (harvest now, decrypt later) means stolen data waits for Q-Day, and AI-speed attacks mean that data was already taken way before most teams noticed. The session works through the path into a PQC migration, what defending against a machine-speed attacker looks like day to day, and how much crypto-agility the next transition demands.

The industrial revolution mechanized human muscle. Today, AI is mechanizing human thought, and the training data is the daily output of white-collar workers. Models flatter us, and teams ship code nobody has read. The same capabilities work for attackers, and we see agents already run large parts of real intrusions today. And that's when the agents don't decide to go rogue themselves. The EU AI Act excludes systems used exclusively for military purposes, and the UN General Assembly has voted on AI's role within autonomous weapons without producing a treaty. Muscle went first, thought is going now, and judgment is next unless we decide otherwise. You leave with three decisions: where a human stays in the loop, which skills you refuse to outsource, and what you ask of the people writing the rules.