CoreRoadmap

Roadmap

Prioritized capabilities in Do now, Do next, and Can wait - generated from your assessment.

Where it lives

Sidebar → Roadmap (/roadmap)

Security Roadmap Risk by Pillar cards with low, medium, and high risk scores
Security Roadmap Risk by Pillar cards with low, medium, and high risk scores

The top of the page shows Risk by Pillar (score and Low / Medium / High). Use Export Report for the same executive PDF as Executive View.

Phases

Atlas groups recommended capabilities (not raw controls) into three columns:

Highest urgency. Any control in this bucket promotes the whole capability here.

Each capability card lists related CIS controls, pillars, and a suggested timeline. Expand a card to see the underlying controls.

Deduplication

The same capability never appears in two phases. It is promoted to the most urgent phase that any of its controls require.

Actions

  • Expand a capability to inspect controls and priority.
  • Download PDF - same executive report as Executive View.
  • After you change assessment answers and submit, this page refreshes automatically.

Implementation tracking lives on Tasks. Completing a task does not by itself move the assessment score - re-submit Assessment when the control is truly in place.