Quantum policy has shifted from warning about future threats to measuring institutional readiness, creating an urgent need for governance frameworks that let regulators, auditors and boards assess, compare and verify post-quantum migration before deadlines arrive.