Action Plan

---

Action plans provide direction and focus, enabling organizations to achieve strategic goals and objectives.

• help frame how to measure progress
  • outline the steps, resources, and timelines required to achieve specific goals
• should be tailored to each organization’s unique needs and regularly updated
• should begin with a clear statement of the desired outcome
  • followed by a detailed description of the steps and resources needed
• Common Action Plan Outcomes:
  • Establish security policies
  • Train staff
  • Software patching
  • Compensating controls
  • Configuration management
  • Leadership management