EM-P1Govern exposure scope
Exposure Management
Gantt
Review schedule timing and dependencies
Actions
StatusIn progress
EM-P1-M01Set exposure program ownership
StatusIn progressEM-P1-M02Define critical services and exposure scope
StatusPlannedEM-P2Establish exposure coverage and evidence
EM-P2-M03Establish the asset and owner inventory
StatusPlannedEM-P2-M04Discover the external attack surface
StatusPlannedEM-P2-M05Map assessment coverage
StatusPlannedEM-P2-M06Designate systems of record and evidence contracts
StatusPlannedEM-P2-M07Enrich findings with exploitation evidence
StatusPlannedEM-P3Prioritize and reduce material exposure
EM-P3-M08Approve risk-based prioritization
StatusPlannedEM-P3-M09Set remediation deadlines and escalation
StatusPlannedEM-P3-M10Govern exceptions and compensating controls
StatusPlannedEM-P3-M11Connect findings to accountable remediation
StatusPlannedEM-P3-M12Burn down urgent exploitable exposure
StatusPlannedEM-P3-M13Identify material exposure chains
StatusPlannedEM-P3-M14Retest and verify closure
StatusPlannedEM-P3-M17Exercise critical-exposure escalation
StatusPlannedEM-P3-M18Establish the operating review cadence
StatusPlannedEM-P4Measure and report exposure reduction
EM-P4-M15Measure coverage, age, and verified reduction
StatusPlannedEM-P4-M16Report exposure decisions to leaders
StatusPlannedGovern exposure scope
- Forecast finish
- October 23, 2026
EM-P1-M01 · Set exposure program ownership
- Forecast finish
- September 25, 2026
- Generated baseline
- September 25, 2026
EM-P1-M02 · Define critical services and exposure scope
- Forecast finish
- October 23, 2026
- Generated baseline
- October 23, 2026
Establish exposure coverage and evidence
- Forecast finish
- April 23, 2027
EM-P2-M03 · Establish the asset and owner inventory
- Forecast finish
- December 4, 2026
- Generated baseline
- December 4, 2026
EM-P2-M04 · Discover the external attack surface
- Forecast finish
- January 15, 2027
- Generated baseline
- January 15, 2027
EM-P2-M05 · Map assessment coverage
- Forecast finish
- February 26, 2027
- Generated baseline
- February 26, 2027
EM-P2-M06 · Designate systems of record and evidence contracts
- Forecast finish
- March 26, 2027
- Generated baseline
- March 26, 2027
EM-P2-M07 · Enrich findings with exploitation evidence
- Forecast finish
- April 23, 2027
- Generated baseline
- April 23, 2027
Prioritize and reduce material exposure
- Forecast finish
- April 7, 2028
EM-P3-M08 · Approve risk-based prioritization
- Forecast finish
- May 21, 2027
- Generated baseline
- May 21, 2027
EM-P3-M09 · Set remediation deadlines and escalation
- Forecast finish
- June 18, 2027
- Generated baseline
- June 18, 2027
EM-P3-M10 · Govern exceptions and compensating controls
- Forecast finish
- July 16, 2027
- Generated baseline
- July 16, 2027
EM-P3-M11 · Connect findings to accountable remediation
- Forecast finish
- August 27, 2027
- Generated baseline
- August 27, 2027
EM-P3-M12 · Burn down urgent exploitable exposure
- Forecast finish
- October 22, 2027
- Generated baseline
- October 22, 2027
EM-P3-M13 · Identify material exposure chains
- Forecast finish
- December 3, 2027
- Generated baseline
- December 3, 2027
EM-P3-M14 · Retest and verify closure
- Forecast finish
- December 31, 2027
- Generated baseline
- December 31, 2027
EM-P3-M17 · Exercise critical-exposure escalation
- Forecast finish
- March 24, 2028
- Generated baseline
- March 24, 2028
EM-P3-M18 · Establish the operating review cadence
- Forecast finish
- April 7, 2028
- Generated baseline
- April 7, 2028
Measure and report exposure reduction
- Forecast finish
- February 25, 2028
EM-P4-M15 · Measure coverage, age, and verified reduction
- Forecast finish
- January 28, 2028
- Generated baseline
- January 28, 2028
EM-P4-M16 · Report exposure decisions to leaders
- Forecast finish
- February 25, 2028
- Generated baseline
- February 25, 2028
Recommendations
| Actions | |||||
|---|---|---|---|---|---|
| No active recommendations for this view. | |||||
- No active recommendations for this view.



