Organisations are unprepared to face two critical deadlines that will significantly impact how they keep out upcoming quantum threats.