# NSA and Partners Issue PQC Vendor Guidance

On November 4, 2026, the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and Australia’s Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) released vendor-neutral questions to help organizations evaluate third-party readiness for post-quantum cryptography (PQC). The guidance is not a contract or solicitation; it gives procurement teams and contractors a resource for assessing vendors’ cryptographic dependencies, transition plans, product support, and supply-chain risks during sourcing, contract renewals, and ongoing vendor assurance.

- Procurement teams can incorporate the questions into vendor assessments and renewal reviews to identify PQC dependencies and potential transition gaps.
- Contractors and suppliers can use the guidance to prepare clear information about their products’ cryptographic dependencies, PQC transition plans, and support capabilities.
- The guidance is voluntary assessment material, not a stated compliance mandate or procurement requirement. No contract value, solicitation, or deadline was announced.

**Jurisdictions:** federal
**Industries:** Information Technology, Defense & Military
**Topics:** Cybersecurity
**Published:** November 05, 2026

### Government Entities
- National Security Agency (NSA)
- Cybersecurity and Infrastructure Security Agency (CISA)
- Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC)

### Sources
- [
	NSA Joins ASD’s ACSC and CISA to Provide Practical Questions to Evaluate Third-Party Readiness for Post-Quantum Cryptography > National Security Agency/Central Security Service > Press Release View
](https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4641375/nsa-joins-asds-acsc-and-cisa-to-provide-practical-questions-to-evaluate-third-p/) - NSA
- [NSA releases guidance to evaluate third-party PQC readiness - Intelligence Community News](https://intelligencecommunitynews.com/nsa-releases-guidance-to-evaluate-third-party-pqc-readiness/) - Intelligence Community News