Compliance coverage
Evidence packs, not spreadsheets.
Each framework links to what it requires, which products satisfy which clause, and, for the classical frameworks, the cryptography clause that quietly makes it a post-quantum problem.
PCI DSS 4.0 §12.3.3 is the sharpest example, a mandatory cryptographic inventory, already in force, with nothing to do with a future quantum computer.