Sections 8, 9 & 10
30-60-90 Day Roadmap & Self-Assessment Scorecard
Page 7 of 10
Days 1 - 30
Phase 1: Urgent Controls
Patch critical CVEs, enforce MFA on cloud suites, and block exposed RDP/SSH management ports.
Days 31 - 60
Phase 2: Hardening
Configure DMARC reject rules, deploy enterprise EDR, and clean dangling DNS & S3 bucket permissions.
Days 61 - 90
Phase 3: Certification
Outsource 24/7 SOC monitoring to Cyber Amanah and complete Cyber Essentials Plus audit pass.
Security Posture Self-Assessment Scorecard
35 – 40 Checked Items
Mature / Ready for Cyber Essentials Plus Audit
25 – 34 Checked Items
Moderate Risk / Execute Phase 1 & 2 Roadmap
0 – 24 Checked Items
CRITICAL RISK / High Probability of Breach