Day 0–30
Find & frameEstablish the decision record security leadership can govern.
- 01Confirm approved scope and confidential boundaries
- 02Map cryptographic exposure into a CBOM-style decision record
- 03Name owners for material paths — not a ticket pile without accountability
