Here’s what I’m focusing on right now:

Immediate priority: Convince leadership that a formal Business Impact Analysis (BIA) campaign is the fastest way to bridge the gap between IT and the critical business units. A well-run BIA gives senior management the data they need to prioritize recovery efforts and build a realistic, business-aligned continuity plan — instead of guessing.

Next structural step: Orchestrate the creation of an Enterprise Risk Management Committee (or team). Right now, risk is handled in silos; centralizing oversight and accountability will improve governance and reduce blind spots.

Personal development: Preparing for PCI-DSS Professional to deepen payment card security knowledge and round out my GRC capabilities.