Roadmap
Prioritized capabilities in Do now, Do next, and Can wait - generated from your assessment.
Where it lives
Sidebar → Roadmap (/roadmap)

The top of the page shows Risk by Pillar (score and Low / Medium / High). Use Export Report for the same executive PDF as Executive View.
Phases
Atlas groups recommended capabilities (not raw controls) into three columns:
Highest urgency. Any control in this bucket promotes the whole capability here.
Near-term work. Used only if nothing in the capability is Do now.
Lower urgency. Still tracked so it does not disappear.
Each capability card lists related CIS controls, pillars, and a suggested timeline. Expand a card to see the underlying controls.
Deduplication
The same capability never appears in two phases. It is promoted to the most urgent phase that any of its controls require.
Actions
- Expand a capability to inspect controls and priority.
- Download PDF - same executive report as Executive View.
- After you change assessment answers and submit, this page refreshes automatically.
Implementation tracking lives on Tasks. Completing a task does not by itself move the assessment score - re-submit Assessment when the control is truly in place.