1. Work with board to address resources, budget and risks

2. Run both internal and external audits to identify to verify and identify additional gaps.

3. Evaluate and report on managment meeting and internal/external audits to provide detailed GAP analysis report and allow management to greenlight next steps in Phase 2.

1. Advise managment the cyber risk policy with organisations overall risk profile and provide details on how it fits with the organisations overall risk strategy.

2. Begin training internal staff for Cybersecurity roles and bringing in third party vendors to manage SOC and digital forensics as per cyber strategy

3. Establish cyber commitees with board members which oversee all cyberrisk risk strategy and implementations and provide feedback and approval where necessary. Also introduce CISO as cyberrisk board member to correctly advise board.

1. As part of implementation reporting tools fully implemented by MSSP to provide regular quarterly reports to cyber committee. Also implement live notification alert system that allows all members to see alerts and track incidents in real-time.

2. Create and implement cyber incident protocol and training which details and trains committee members on managing cyber incidents.

3. Integrate Cyber Vision 2022 into business mission. Advise how it affects overall business strategy and impact to all other area's of the business.