Organizations should be able to add quantum-safe protections in specific parts of their systems, then expand as confidence grows.