Roadmap
?
From today to the last planned item, in three swimlanes: policies and awareness, control implementation, and audits and evidence. The most important work comes first in each lane. Click a bar, a milestone or an audit date for details.
Milestones in detail (owners, mark done, emails)
Posture
0%100% of controls in place
As a table
Posture history
?
How your security posture developed: the share of in-scope controls in place, per day. It counts the GAP analysis, completed roadmap work, current evidence and assigned owners, like policy coverage on the Posture page.
A snapshot is taken every day and whenever an analysis finishes or roadmap work is done. Days before the first snapshot are reconstructed from earlier GAP analyses, roadmap work and evidence.
Overall posture
Frameworks
Key improvements
Domains
Board summary
?
One page for the board or management: overall posture and its trend, fine exposure, what comes up next and the three largest risks. Figures come from the latest GAP analysis, the roadmap and current evidence.
Top 3 risks
Coming up
Posture over the last 12 months
Indicative figures. The exposure weighs each regulation's maximum fine by the share of its controls not yet in place; authorities rarely impose the maximum.
Launch/Land emails
?
Drafted when a milestone completes. Review, copy into your mail client, then record who it went to.
Marketplace
Vetted vendors for what is still red or amber. Requests are anonymised: vendors see your size band, sector and country, never your name, until you accept a quote. Compare the bids here and accept the best one.
Your requests for quotes
Security functions
The teams and roles that run security day to day. Give each one an owner, and let the owners upload how they work: process descriptions, playbooks, runbooks, pentest scopes, scan schedules. The documents go into the Document vault, so the GAP analysis counts them as evidence that the controls are practised.