Goal: Establish the prerequisites necessary for the proper implementation of the information security program.
- Alignment with Business Missions & Objectives
- Stakeholder Buy-In
- Executive Sponsorship
- Business Case
- Budget Authority
- Steering Committee
- Roles & Responsibilities
- Managed Security Service Providers (MSSPs)
- Cyber Insurance
- Cybersecurity Project Management
- Capacity Planning
- Requirements Gathering
- Network & Computer Hardware Upgrades
- Reviewing & Upgrading Operating Systems
- Refresh Cycles
- Communication Channels
- Maintenance Windows & Blackout Periods
- Staging Environment
- Scope Statement
- Program Charter
- Security Roadmap
- Metrics & Key Indicators