In the Post-Quantum Cryptography (PQC) era, assessing quantum risk is essential for informing decisions such as prioritising system migration. Emerging identity and authorisation systems, including Decentralised Identifiers (DIDs) and Verifiable …