| 01 | Govern | CISO office | Risk appetite, roles, policy and board reporting | Programme & Maturity › Maturity |
| 02 | Identify | Security engineering | Assets, data, suppliers and risk | Data Security › Data map |
| 03 | Protect | Security engineering | Identity, devices, data, keys and the edge | Identity & Access › Overview |
| 04 | Detect | SOC | Continuous monitoring with AI triage | SOC & Incidents › Alert queue |
| 05 | Respond | Incident commander | Contain, eradicate, communicate | SOC & Incidents › Incidents |
| 06 | Recover | IT operations | Restore services and confirm integrity | Settings › Residency & resilience |
| 07 | Improve | CISO office | Lessons learned feed the roadmap | Programme & Maturity › Roadmap |