Starting with what was in place
The starting point was the company’s existing approach to security. The review considered how that foundation could support the work ahead and where further attention would be needed.
Setting out the work
The advice focused on understanding the scope of the task and organising it into a roadmap. This meant considering priorities, responsibilities and the evidence the company would need to develop.
Preparing for the project
The roadmap provided a basis for planning the work alongside the infrastructure project, helping the company understand what it needed to prepare and how to organise the next steps.