Planning template

90-Day Security Roadmap Template

Use this to turn a posture review, questionnaire, or insurance renewal into a plan with owners and dates. Each line should name who does it, by when, and how you will prove it is done.

01

Days 1 to 30: close urgent exposure

  • Enforce MFA for every administrator and remove legacy authentication
  • Review external mail forwarding and suspicious mailbox rules
  • Name an owner for security alerts, including after hours
  • Confirm backups exist and schedule a restore test

02

Days 31 to 60: add monitoring and ownership

  • Decide who investigates identity, email, and endpoint alerts
  • Document the escalation path and who can approve containment
  • Review third-party app permissions and external sharing
  • Start a simple evidence folder with dated screenshots and reports

03

Days 61 to 90: make it repeatable

  • Run a tabletop exercise for a compromised mailbox
  • Set a monthly review of alerts, access changes, and open risks
  • Update questionnaire and insurance answers from real evidence
  • Agree the next-quarter priorities with leadership

04

Track for each item

  • Owner
  • Due date
  • Evidence that it is complete
  • Business reason it matters