Aaron PritzCEO, Reveal Risk · Cybersecurity Executive | CEO of Reveal Risk | Pharma and Healthcare Focus | Author & Speaker | Board Advisor

NIST CSF: Bringing Assessment to Strategy to Actionable Steps

Name: NIST CSF: Bringing Assessment to Strategy to Actionable Steps
Uploaded: 2026-04-06T04:45:01+00:00
Duration: 1 min 1 s
Channel: Aaron Pritz
Description: The speakers outline a methodology for turning a NIST Cybersecurity Framework (CSF) assessment into an actionable strategy and roadmap. After completing…

6 Apr 2026 · 1 min

Watch on YouTube

1:01

The speakers outline a methodology for turning a NIST Cybersecurity Framework (CSF) assessment into an actionable strategy and roadmap. After completing the assessment, organizations obtain benchmarks that highlight gaps in people, process, and technology. The next step involves intensive collaboration with leadership to define concrete initiatives, each supported by a charter and a customizable roadmap owned by the program’s responsible individual. Deliverables include one‑page briefs, effort and resource estimates, and all the materials needed to pitch the initiative to executives for funding, staffing, and sponsorship. Securing leadership sponsorship enables the organization to advance its cybersecurity maturity through these targeted, well‑resourced projects.

Chapters

Okay. So if you had to explain our methodology for bridging from assessment to strategy and roadmap, what is that process like? How do we make it actionable for people? What do they actually get out of those experiences that's different from just the assessment?
Yeah. I mean, I would say once you have the assessment, you have some benchmarks, you understand the areas that you need to focus future investment in people, process, and technology. We're going to spend a lot of time working with those leaders to dial in specific initiatives, including charters, roadmaps that are owned and customizable by the individuals that own the program, but then specific initiatives, one-pagers, estimates of effort, resourcing, really everything that you would need to pitch a charter to an executive to fund or to resource or to get support. Organizationally and from a leadership sponsorship standpoint for those key initiatives to help you improve their maturity.