Immediate Short-Term Impact (2–4 Months)

Now that the current state assessment of the program has been completed, you will have a better idea of what is needed for the immediate short-term roadmap. This roadmap will follow your initial review of the environment and consists of a 90-day timeline. The idea here is that you look to make some immediate impact within the program. After your initial review, you may have identified some high-risk items that need to be addressed immediately. There may be some items that are in place but have some gaps that need to be addressed. This immediate roadmap will also give you the time to get better acclimated with the cybersecurity program and to get you moving as quickly as possible. This roadmap will also be a foundation to get some other initiatives in motion as you move into the short-term 5–12 months roadmap. As a new leader, you will quickly observe that accomplishments will not happen overnight, especially within larger organizations...