Cybersecurity Roadmap

Cybersecurity roadmap is defined as the necessary steps required achieving a strategy or a strategic objectives in support and alignment of the business vision and mission of an organization. In the context of developing and making key improvements to a cybersecurity program, a cybersecurity program will consists of various tasks and projects that will result in the creation and implementation of possible potentials that contribute to a reduction of organizational information security risks. Cybersecurity roadmap is list of steps required to achieve a strategic objectives or goals of an organization. Moreover, cybersecurity roadmap ensures holistic visibility into the cybersecurity posture and programs of an organization and offers a strategic plan for future improvement endeavors. And it charts out the entire end-to-end cybersecurity path and steps along with internal company processes and systems.

Once cybersecurity strategic objectives, risk and security threat assessments, and gap analysis have been completed, a cybersecurity strategist will begin to establish cybersecurity roadmaps to accomplish each specified objective.

Major components of cybersecurity roadmaps in an organization may include:

• Cyber supply chain risk management
• Governance and enterprise risk management
• Identity and access management
• Internet of things (IoT)
• Measuring cybersecurity
• Privacy engineering
• Secure software development
• Physical security
• Compute, storage, and networking security
• Security-aware organization
• Insiders threats handling
• Malware prevention techniques
• Cybersecurity of industrial controls systems