Docs / Reference
Your plan on a page
One page you can put in front of a board, a risk committee or your own team. Seven headings, each with the questions to answer under it.
Answer the bullets below and you have the page.
1. What are we protecting against?
- What is the specific loss, in one sentence, not the category?
- What would it cost us if it happened once?
- How would we find out that it had happened?
2. What is true today?
- How many agents exist, and where did they come from?
- How many of them can write to a real system?
- How many run under a person's credentials rather than their own identity?
- Who could tell us, if we asked right now?
3. What are the rules?
- What ten rules will a governed agent live under? (See The policy you write.)
- Which of them are enforced by the platform and need no policing?
- Which are conventions our team is promising to hold?
- Who signs off that the list is complete?
4. What is in scope, and what is deliberately not?
- Which of the six questions puts something in scope for us? (See The policy you write.)
- What are we explicitly leaving alone, and have we said so in writing?
- Where do personal productivity agents live instead?
5. Who does what?
- Who is the named owner, and who is the backup?
- Who approves writes for each system, and are they in the function that owns the outcome?
- Who decides which operations exist on each system?
- Who is accountable when something goes wrong?
6. How do we get started?
- How will we find what people have already built?
- Which automation are we starting with, and why that one?
- What are the dates, and who is in the room? (See Setting up Mindset.)
- What does the second one cost, once the first is done?
7. What will we measure?
- Which numbers come from Mindset? (See Running Mindset without spending hours on it.)
- Which number comes from our own systems, and have we captured the baseline before anything goes live?
- What does the monthly review look at, and who is in it?
- What would tell us early that this is not working?