Create a security roadmap aligned to [RegulatoryFrameworks] for mission-critical [CrownJewelSystems] across transport, shipping, and storage operations. Map attack surface including [ThirdParties] and [HighRiskSites]. Prioritize controls, resilience, and incident readiness with a pragmatic investment plan of [BudgetOpex] over [TimeHorizon].
Output format:
Threat & Gap Assessment (table: Asset | Threat | Current Control | Gap | Risk Rating).
Control Prioritization (table: Control | Standard | Effort | Benefit | Dependence | Owner).
Incident Response Playbook (table: Scenario | Trigger | First 24h Actions | Comms | Recovery).
Resilience Plan (table: RTO/RPO | System | Strategy | Test Cadence | Evidence).
Compliance Tracker (table: Clause | Evidence | Owner | Due Date | Status).
Ensure OT/IoT constraints (latency, safety) and maritime/port specifics are considered.