> Agencies must appoint PQC migration leads It forces the management layer, not the crypto design layer. The order can compel inventories, deadlines, and ownership, but it does not magically make agencies enumerate every place where PQC changes protocol shape, key management, or certificate handling, that still lives in the migration program and the underlying standards guidance. So no, it’s not just “swap the algorithm” if anyone does the work honestly, because hybrids, signatures, KEM handshakes, and size limits all change system behavior. But the EO itself mostly creates pressure and accountability, it doesn’t specify the protocol surgery.