Day 22 of 22DPDPA · India Privacy· ~90 min

CAPSTONE — Board presentation on year-1 compliance roadmap

Scenario

You've spent 22 days on this programme. The Board wants a single presentation showing what you'd propose for KaizenMotors' Year-1 Compliance Roadmap covering GRC governance, ISO 27001, PCI DSS, ITGC/SOC 2 readiness, and DPDPA. Budget: ₹1.5 cr for Year 1. You have 30 minutes.

Your role

You are presenting to the Board as newly-appointed Head of GRC.

Your task

Produce a 10-slide presentation outline (title + 3-4 bullets per slide): 1. Executive summary (why this matters — business risk framing) 2. Current state — brutal honesty on where they are 3. Year-1 goals (3 measurable outcomes) 4. Framework strategy (why ISO 27001 first, SOC 2 in year 2) 5. Programme structure + hires needed 6. Quarterly roadmap (Q1 / Q2 / Q3 / Q4 milestones) 7. Budget breakdown (headcount + tools + external + contingency) 8. Risk register (top 5 organisational risks) 9. Success metrics + reporting cadence to Board 10. Ask + decisions needed today Include ONE punch-line quote for the CEO to remember 6 months later.

Deliverable format: Presentation outline ~1200-1800 words + quotable summary line

Toolkit

  • Board pitches: 3-second rule — every slide should answer 'so what' in 3 seconds
  • Framework sequencing: ISO 27001 first (broadest applicability), SOC 2 for US customers, PCI DSS if card processing continues, DPDPA is mandatory (not optional)
  • Budget rule of thumb: 60% headcount, 20% tools, 15% external, 5% contingency
  • Ask: name the specific decisions you need (approve headcount? approve framework? approve DPO?)

Success criteria (what the AI grades against)

  • Business-risk framing is board-appropriate (financial exposure + contract risk)
  • Current state is honest (shows judgment, not spin)
  • Framework choice is reasoned + sequenced
  • Budget allocation follows established heuristics
  • Ask is specific (Board can vote yes/no/defer)
  • Punch-line quote is quotable + accurate + emotionally sticky
  • Roadmap is defensible under scrutiny (not overpromising)

Log in to submit your deliverable for AI review.

Log in / Register