Chapter 11: The Improvement Roadmap

From Inspection to Roadmap

Why Annual Reviews Should Be Your Standard

The Prioritization Hierarchy

Phase 1: Shore Up the Foundation

Acceptable Use of Information Technology (P-03)

Privacy Policy (P-05)

Information Security Policy (P-09)

Phase 1 Checkpoint

Phase 1 Quick Win: Extract Embedded Standards

How to identify candidates

Phase 2: Address the Structural Loads

The Compliance-Driven Priorities

If you extend credit to students (most institutions):

If you process payment cards (most institutions):

If you have federal research funding (R1/R2 institutions):

The Operationally-Driven Priorities

If ransomware is one of your top IT risks:

If third-party vendor management is one of your major risks:

Phase 2 Checkpoint

Phase 3: Future-Proof the Structure

AI Governance (P-12)

Digital Presence / Web Governance (P-14)

Institutional Access to Electronic Information (P-17)

Zero Trust Architecture (S-20)

Building This Year’s Roadmap

Estimating the Work

Matching Commitments to Capacity

Three Commitment Buckets

Establishing an Annual Cycle

Don’t Forget the Culture Work

Communication Template

Chapter 11 Key Takeaways