With the progress of quantum computing, medical institutions that use classical public-key cryptography to secure the confidentiality of long-lasting and delicate healthcare information are facing great security challenges. This research aims to suggest a policy framework for Post-Quantum Cryptographic Policy (PQCP) to facilitate systematic shift of healthcare infrastructures to quantum resistant infrastructure security. It seamlessly combines cryptographic asset discovery, quantum-risk assessment, asset prioritization, crypto-agility, hybrid cryptographic migration, secure key management, governance, compliance monitoring, and ongoing security evaluation. It covers electronic health records, healthcare platforms in the cloud, medical imaging, telemedicine applications and resource-limited Internet of Medical Things devices. A risk-oriented migration strategy gives institutions the ability to prioritize systems based on the amount of data in a system, the vulnerabilities of the cryptographic functions used, the clinical criticality of the system, and the length of time the information must be kept confidential. There are hybrid (classical and post-quantum) mechanisms for gradual migration and interoperability or clinical continuity. Finally, the suggested framework offers a structured approach to enhance the preparedness of healthcare institutions, adherence to regulations, resilience against cryptographic attacks, and long-term protection of healthcare information from the evolving quantum cybersecurity landscape.