Step 1: Determine objectives, priorities, and scopeStep 2: Identify assets and risksStep 3: Create a current profileStep 4: Conduct a risk assessmentStep 5: Create a target profileStep 6: Perform a gap analysis and develop an action planStep 7: Implement the action planContinual improvementDecision-making and implementation responsibilities