Chapter 12: The Improvement Roadmap

From Inspection to Roadmap

Why Annual Review Is the Standard

The Prioritization Hierarchy

Phase 1: Shore Up the Foundation

Acceptable Use of Information Technology (P-03)

Privacy Policy (P-05)

Information Security Policy (P-09)

Phase 1 Checkpoint

Phase 1 Quick Win: Extract Embedded Standards

Phase 2: Address the Structural Loads

The Compliance-Driven Priorities

If you extend credit to students (most institutions):

If you process payment cards (most institutions):

If you have federal research funding (R1/R2 institutions):

The Operationally-Driven Priorities

If ransomware is one of your top IT risks:

If third-party vendor management is one of your major risks:

Phase 2 Checkpoint

Phase 3: Future-Proof the Structure

AI Governance (P-12)

Digital Presence / Web Governance (P-14)

Institutional Access to Electronic Information (P-17)

Zero Trust Architecture (S-20)

Building This Year’s Roadmap

Estimating the Work

Matching Commitments to Capacity

The Three Commitment Buckets

Closing the Annual Cycle

The Culture Work

The Project Toolkit

The Stakeholder Brief

Why We Are Updating Our Policy Framework

Chapter 12 Key Takeaways