How to prioritize

A question that often arises from customers is, “With so many services, security controls, and recommendations… How do I prioritize? Where do I start?”

The approach of this maturity model is based on the following:

Some controls are easy to implement, since they require little effort, understanding effort as:

  • Implementation speed or simplicity
  • Ease of management/Operational load
  • Service cost

Other controls are of utmost importance as they provide great benefits in terms of reinforcing security.

The intersection of these groups are the Quick Wins, and they are what we need to tackle first. All Quick Win recommendations can be implemented in less than a week.

Let’s look at the next stages of maturity on the next page.