Chapter 11: Conducting the Inspection

Documentation Meets Reality

If You Only Have 20 Hours

The Inspection Process

Step 1: Gather Your Documentation

Estimating the Effort: The Resource Reality Check

A Note on the Public/Private Divergence

Watch for Fragmentation

The Scale of the Problem

How Fragmentation Happens

Best Practices for Preventing Fragmentation

During Your Inspection

Step 2: Create Your Inventory

Step 3: Assess Against the Framework

For Each Policy (P-01 through P-17)

For Each Standard (S-01 through S-24)

Scoring Guidance

Understanding Your Maturity Score

Quick Self-Assessment

Step 4: Prioritize the Gaps

Priority 1: Universal Items with Gaps

Priority 2: Legally Required Items

Priority 3: Mission-Critical Items

Priority 4: Common Items with Gaps

Priority 5: Emerging Items

Step 5: Document Your Findings

Your Inspection Is Complete

Additional Support For Your Assessments

Free Self-Assessment Worksheet

The CampusCISO IT Policy Diagnostic

The CampusCISO IT Policy Roadmap

Learning More

Chapter 11 Key Takeaways