Short-Term Impact (5–12 Months)

Now that you have created the immediate short-term impact roadmap, you can start compiling the roadmap that will take you through to the end of the first year. The first year will be critical for the program as you get your feet off the ground with the cybersecurity program. As mentioned within the Immediate Short-Term Impact (2–4 Months) section, there will most likely be several items that will roll over into the short-term roadmap.

You will have identified items that are needed but will take a lot longer to implement because of contractual work, the need for Request for Proposals (RFPs), potential budgetary constraints, etc. Essentially, you’ll find a lot of red tape, especially in larger organizations. Because of this, you will need to ensure that you capture your first item on this roadmap as items rolled over from the 2–4 months roadmap. Something else to consider when building this roadmap is that it will not...