01. Governance and Risk
Establish leadership accountability and clear reporting to keep security decisions informed and effective.
02. Protection and Awareness
Strengthen technical controls and staff awareness to prevent breaches before they occur.
03. Detection and Oversight
Improve visibility through continuous monitoring and evidence-based performance tracking.
04. Response and Improvement
Ensure incidents are contained quickly and insights drive smarter, stronger defences.



