Select the improvements you want to prioritize. Items are sorted by risk reduction per dollar — highest ROI first.
The SOW is the formal project document. The Sales Deck is for internal budget approval — designed to be presented to your leadership team.
| FRAMEWORK | CATEGORY | READINESS BREAKDOWN | MET | STATUS | AUDIENCE |
|---|
• Revenue risk: incident cost and frequency
• OpEx risk: manual toil and recurring costs
• Cost of inaction over 12 and 24 months
• ROI model with payback period
• Comparison to equivalent consulting cost
• Prioritized investment recommendation
• SOC 2 control gap analysis (Type I & II)
• ISO 27001 Annex A mapping
• NIST CSF readiness by function
• Change control audit trail exposure
• Prioritized remediation for audit prep
• Evidence collection requirements
• After-hours escalation frequency data
• Knowledge concentration risk mapping
• Single points of failure identification
• Training and upskilling gap assessment
• Cost of attrition in operational context
• Workforce risk reduction roadmap
• Change-attributed incident cost modeling
• Undetected outage revenue impact
• SLA breach penalty exposure
• Revenue risk reduction roadmap
• ROI of top 3 improvements on revenue
• 12-month revenue protection scenario
• Manual toil cost by process area
• Senior resource time leakage analysis
• Knowledge management cost of gaps
• Cost of inaction over 12/24 months
• Investment case and payback period
• OpEx reduction roadmap
• Service visibility gap map by platform
• SLA breach frequency and customer impact
• Incident communication quality score
• CX perception gap (IT belief vs reality)
• NPS impact modeling
• CX risk reduction roadmap
• DR plan status and test history
• Actual vs documented RTO/RPO
• Release failure rate and root cause
• Single points of failure mapping
• Resilience improvement roadmap
• Business continuity risk score
• Incident communication maturity assessment
• Customer-visible event probability model
• Social and media exposure analysis
• Brand recovery cost modeling
• Proactive communication capability score
• Brand risk reduction roadmap
• Specific control failures mapped
• Regulatory exposure by jurisdiction
• Audit readiness score and timeline
• Liability risk of current gaps
• Remediation priority for audit prep
• Evidence collection requirements
• AI/ML operations maturity by domain
• Data sovereignty and residency exposure
• AI regulatory compliance posture (e.g. EU AI Act)
• Investment case for closing data/AI gaps
• ROI of top-ranked improvement actions
• Data & AI risk reduction roadmap
Control who can view this workspace and at what permission level.
Survey participation status. Use per-row actions to resend invitations to individuals.
Locking stops all new survey submissions and marks data collection complete. Domain scope, organization profile, the assessment window, and the respondent roster all become read-only — this action is not reversible from this panel.
Domains included in this assessment cycle. Scope changes are permitted while the assessment is ACTIVE and locked once closed.
Loading domain scope…
Carried over from project setup. Editable while the assessment is ACTIVE and locked once closed, same as domain scope.