> For the complete documentation index, see [llms.txt](https://knowledge.adsgroup.org.uk/8RnoQ2Y1ZgHQnhYYpqoO/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://knowledge.adsgroup.org.uk/8RnoQ2Y1ZgHQnhYYpqoO/digital-and-cybersecurity-pillar/pathway-to-improvement/setting-targets-for-improvement.md).

# Setting Targets for Improvement

Every organisation's path to digital and cybersecurity maturity is unique, shaped by its industry, size, and strategic objectives. This page provides a structured approach to setting improvement targets based on your assessment results, ensuring your efforts are strategic, achievable, and aligned with your goals.

***

## **1. Focus on High-Impact Areas**

Prioritise the themes and sub-themes that are most critical to your organisation's success:

* **Manufacturers**: May prioritise supply chain security and operational resilience.
* **IT Providers**: Likely to focus on data protection, application security, and seamless system integration.
* **Consultants and R\&D Organisations**: May emphasise compliance and innovation in cybersecurity practices.

***

## **2. Align Goals with Timeframes**

Set improvement goals across short-, medium-, and long-term horizons:

* **Short-Term Goals**: Address immediate gaps needed to meet compliance requirements.
* **Medium-Term Goals**: Focus on enhancing capabilities and maturing processes.
* **Long-Term Goals**: Target optimisation and continuous improvement for advanced maturity.

**Example:**

* **Short-Term**: Implement basic access controls for sensitive data (3 months).
* **Medium-Term**: Conduct regular cybersecurity audits and refine incident response plans (6–12 months).
* **Long-Term**: Establish advanced monitoring and automated security protocols (18–24 months).

***

## **3. Track Progress with KPIs and Metrics**

Use the Performance Type guidance from the assessment to monitor progress effectively:

* **Capabilities**: Define specific actions needed for improvement (e.g., training, process implementation).
* **IGPs (Indicators of Good Practice)**: Evaluate alignment with qualitative best practices.
* **Metrics/KPIs**: Quantify progress with measurable indicators (e.g., percentage of encrypted systems, frequency of training sessions).

Regular tracking ensures alignment with your improvement plan and highlights where adjustments are needed.

***

## **4. Set SMART Goals**

Adopt the SMART framework to ensure your targets are actionable and effective:

* **Specific**: Clearly define actions, such as implementing encryption for all sensitive data.
* **Measurable**: Use KPIs like "percentage of employees trained in cybersecurity" to track progress.
* **Achievable**: Ensure goals are realistic given current resources and capabilities.
* **Relevant**: Align targets with business objectives and compliance needs.
* **Time-Bound**: Set deadlines, such as "complete access control implementation within 6 months."

***

## **5. Plan for Continuous Improvement**

Reaching a target score is just the beginning of the improvement journey. Embed a culture of continuous development:

* **Document Improvements**: Record what has been implemented and its impact to inform future efforts.
* **Reassess Periodically**: Revisit the assessment to track progress and adjust goals as needed.
* **Gather Feedback**: Use stakeholder input to refine practices and ensure improvements remain effective.

***

## **6. Example Target-Setting for Data Security**

Below is a structured approach to setting targets for Data Security in the Data Architecture area:

<table><thead><tr><th width="137">Score</th><th>Current: 1 (Defined)</th><th>Compliance: 2 (Managed)</th><th>Target: 3 (Optimised)</th></tr></thead><tbody><tr><td><strong>Description</strong></td><td>Basic awareness and planning exist.</td><td>Practices are operational and regularly reviewed for compliance.</td><td>Fully embedded and continuously improved processes.</td></tr><tr><td><strong>Key Actions</strong></td><td>Actions needed to <strong>strengthen the current level</strong> and <strong>prepare for 2 (Managed):</strong><br>- Finalise and formally adopt data security policies.<br>- Conduct initial staff training on policy awareness.</td><td>Actions to <strong>progress to 2 (Managed):</strong><br>- Implement encryption for sensitive data.<br>- Set up role-based access controls.<br>- Conduct quarterly data audits.</td><td>Actions to <strong>achieve 3 (Optimised):</strong><br>- Deploy automated monitoring tools for threat detection.<br>- Establish continuous incident response drills.<br>- Align practices with ISO or industry-specific standards.</td></tr><tr><td><strong>Metrics/ KPIs</strong></td><td><ul><li>Percentage of staff trained on data security policies.</li><li>Existence of formally adopted policies.</li></ul></td><td><ul><li>Percentage of sensitive data encrypted.</li><li>Frequency of data audits completed.</li></ul></td><td><ul><li>Mean time to detect/respond to incidents.</li><li>Number of threats mitigated.</li><li>Compliance audit results meeting/exceeding standards.</li></ul></td></tr><tr><td><strong>Timeline</strong></td><td><strong>Completion Target</strong>: 3 months</td><td><strong>Completion Target</strong>: 6–12 months</td><td><strong>Completion Target</strong>: 18–24 months</td></tr></tbody></table>

***

## **Your Roadmap to Improvement**

By focusing on high-impact areas, tracking progress with KPIs, and setting SMART goals, organisations can steadily move up the Pathway Levels from Bronze to Silver and Gold. For additional guidance:

* Explore the [**Best Practice Resources**](/8RnoQ2Y1ZgHQnhYYpqoO/digital-and-cybersecurity-pillar/best-practice-resources/best-practice-guides.md) section for tools and templates to support your improvement journey.
* Use the [**Digital Pathway Assessment Tool**](/8RnoQ2Y1ZgHQnhYYpqoO/digital-and-cybersecurity-pillar/assessment-guide/digital-pathway-assessment-tool.md) to monitor progress and track achievements over time.

***

This approach ensures organisations can systematically address gaps, achieve compliance, and ultimately become leaders in digital maturity and cybersecurity resilience.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://knowledge.adsgroup.org.uk/8RnoQ2Y1ZgHQnhYYpqoO/digital-and-cybersecurity-pillar/pathway-to-improvement/setting-targets-for-improvement.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.