Define strategic objectives and assign clear, time-bound success metrics Assess current state behaviors, cybersecurity sentiment, and knowledge levels Design a strategy to improve the culture around cybersecurity Execute the strategy while monitoring KPIs and milestones Review progress and iterate