Security Transformation Roadmap: 90 Days, 12 Months, 3 Years

What’s inside

1. The short version
2. The decision this framework supports
3. Why roadmaps fail
4. Five rules for sequencing
5. Start with a capacity model
6. The three horizons
7. First 90 days: decide and stabilize
8. Months 4 to 12: build and operate
9. Years 2 and 3: change the shape
10. A workstream view across the horizons
11. The roadmap item test
12. A composite example
13. Governing the roadmap
14. Measuring progress
15. When to break the sequence
16. Using this framework

Sources are listed in the full decision framework.