Free resource

vCISO 90-Day Security Roadmap - Example

Example first-90-days roadmap for a vCISO engagement: activities, deliverables and owners by phase, governance cadence, reporting and the client's responsibilities. Fictional organisation, not a client.

.docx - Word document6 sectionsEditable, not a static PDF

What's inside

Days 0-30, 31-60 and 61-90 with deliverables and owners
Governance cadence and reporting
What stays with management and what is not included
Clearly marked as a fictional example

Preview

The actual structure of the file, straight from the template we use on live engagements.

EXAMPLE - fictional organisation, not a client. Northwind Analytics Ltd does not exist; every name, figure and finding below is invented to show the structure and depth of a Kellwick deliverable.

About this example
Days 0-30: understand and agree the mandate
Days 31-60: governance and ownership
Days 61-90: deliver and settle the rhythm
Governance cadence and reporting
Client responsibilities and boundaries

Preview only. The download is a fully editable .docx file with the guidance and tables filled in for you to complete.

Go deeper

See how this template fits the wider readiness work, and where we pick it up on a live engagement.

Explore the related service

More resources

Other templates teams pair with this one.

.xlsx

ISO 27001 Readiness Checklist

View resource .xlsx

ISO 27001 Evidence Map Template

View resource .xlsx

ISO 27001 Checklist for Software Agencies

View resource