Five functions · 30 topics
Based on the CISO Security Mind Map 2026
The security domains a CISO is accountable for, mapped from left to right across the NIST Cybersecurity Framework functions. Current state shows where the program stands today: maturity, operational KPIs, risks and audit findings. Direction & roadmap shows where it is heading: target maturity, accountable owners and the initiatives that close the gap.
Register
Record risks and audit findings against a topic. They appear on that topic's card and in the overview. Topics without any are fine.
Targets & ownership
Set a target maturity and date for each topic, name one accountable owner, and record when the topic was last reviewed. Topics not reviewed for 6 months are flagged as due, and after 12 months as overdue.
| Topic | Current | Target | By | Gap | Accountable owner | Last reviewed | Initiatives |
|---|
No topics match this filter.
Initiatives
Projects that move topics toward their targets. Link each initiative to the topics it lifts and the risks or audit findings it addresses, with an owner, budget, dates and the maturity uplift you expect.
| ID | Initiative | Topics | Addresses | Owner | Budget | Start – end | Uplift | Status |
|---|