Secure and comply
Auditors, regulators and boards all ask for evidence, and AI agents add new identities to secure. The work is to pick the frameworks that apply, close the gaps, report risk to the board, and be ready to respond and recover.
5 decisions make up this job
- 1
Which frameworks apply
SOC 2, ISO 27001, CMMC Level 2, NIS2, DORA and PCI DSS 4.0 overlap. Map one set of controls to every framework you have to meet.
- 2
Who and what has access
Inventory identities, including service accounts and AI agents, and review their access on a schedule.
- 3
What the board sees
Report cyber risk in business terms, with the metrics and scenarios the SEC and NIST CSF 2.0 expect.
- 4
How you respond
Write the incident response plan with roles, severity levels and disclosure duties, and test it in a tabletop exercise.
- 5
How you recover
Set the restore order, keep immutable copies of data, and test recovery from ransomware before you need it.
The security function, mapped
The cybersecurity capability model with value streams, a data model, agent specifications and controls tied to risk tiers.
Cybersecurity: AI Transformation Blueprint
Trench Notes on this job
Each page sets out the steps and the documents, and practitioners add what they learned doing it.
- Preparing for a SOC 2 auditRead
- Reaching CMMC Level 2Read
- Writing an incident response planRead
- Running a cyber tabletop exerciseRead
- Writing a disaster recovery planRead
- Building a third-party risk programRead
- Implementing ISO 27001Publishes December 15, 2026
- Complying with NIS2Publishes February 5, 2027
- Complying with DORAPublishes February 8, 2027
- Moving to PCI DSS 4.0Publishes January 27, 2027
- Reporting cyber risk to the boardPublishes January 12, 2027
- Planning ransomware recoveryPublishes February 15, 2027
- Rolling out zero trustPublishes February 3, 2027
- Building a vulnerability management programPublishes January 29, 2027
- Running user access reviewsPublishes November 30, 2026
Buyer Guides, comparisons and RFP questions
Buyer Guides
- SIEM & Security Analytics
- Endpoint Detection & Response (EDR/XDR)
- Managed Detection & Response (MDR)
- Identity & Access Management (IAM)
- Privileged Access Management (PAM)
- Zero Trust Network Access (ZTNA)
- Vulnerability Management Platforms
- Backup & Disaster Recovery
- Governance, Risk & Compliance (GRC)
- Security Awareness Training
More for this job
Apps for this job
Enter your situation and each app returns a working document you can take into the meeting.
No charge. Sign in with your work email to use them.