# Cyber Security Road Map

* Current policies
* Key risks and threats to business
* Collect executive stakeholder inputs to identify risk appetite levels and acceptable risk
* Current Cyber Security Framework
* Current Compliance requirements/landscape for the Business ( PCIDSS, SOC 2)
* Network Architecture
* * Segmentation
* High Level Org chart
* Vulnerability Management Data
* List of current tools/technologies in use to address all cyber
* security controls
* * Collect last 0-180 days data to review the threat landscape
* What are stakeholders desired cyber security program state
* Compare similar business operations (security capabilities, budget,
* Human resources)
* Road map plan for next 30-60-90 days, yearly review
