30-60-90

Question 1

DF Plan

Answer 1

30

• Learn datafaction organization, clients, processes, and deployment pipeline
• identify where CIS critical controls are implemented through the company value chain
• map any controls back to regulatory requirements (ask Karl what Regs they fall under) and identify maturity targets for the controls
• establish communications and status updating back to CNB (To Karl and John I would assume)

60

• prepare plans for implementation of new or enhanced controls (preferably aligned to their existing roadmap)
• prepare provide regular training updates about the cyber landscape as it relates to their technology or tech roadmap
• propose any policies, standards, or processes that may be needed to fill gaps

90
- complete delivery on the above and establish a regular cadence of engagement with their teams