In this Page you will find:
1. Introduction to CISO Decision Council Deck
In the presentation below, you will find all the details related to your Quarterly Council Meeting. This deck is specifically prepared for your Council—CISO Decision Council.
For your reference:
- Slide 3: Timeline
- Slides 4 & 5: Key guidance on the steps to follow
Please review the relevant sections for comprehensive information.
2. Templates - Prioritization Matrix & Roadmap
On the following slides, you will find two ready-to-use templates—one for each quarter:
- Template 1: Domain Roadmap (see Slide 8 for Quarter 1)
- Template 2: Portfolio Prioritization Matrix (see Slide 7 for Quarter 1)
Product Managers are expected to complete each template prior to the Quarterly Council Meeting. During the meeting, these templates will be reviewed, discussed, and prioritized.
Key decisions should be documented in the table provided below. If you wish to capture more detailed information, you may optionally use the Meeting Minutes Template available in your dedicated folder.
3. Templates - 2026 Budget, 2026 Resources & 2026 Contracts
The following templates will serve as our primary working files for 2026:
These templates are essential for preparing the 2026 Budget Exercise and will continue to be used throughout 2026. Please ensure they are reviewed, updated, and prioritized at each Quarterly Decision Council Meeting.
4. Key Decisions
Please ensure that the table below is completed for each Quarterly Decision Council Meeting, capturing the key decisions and topics discussed. If you wish to provide additional details, you may use the Meeting Minutes template; please click in the link.
4.1. Key Decisions - Quarter 1
Meeting Date: (Please enter the correct date)
| ID | Key decision | What at stake if not done | People Involved - Business/IT/GBS | Key Decision (GO/NO-GO) (Quarter to start) | Comments (Please include any comments you consider necessary and relevant) |
|---|---|---|---|---|---|
1 | Do we agree we need a dedicated CoE for the different Microsoft resources inside & outside of the GCC | ||||
2 | Do we agree on the proposed managed service contracts to exit towards the GCC? | Not achieving a 2.5MEuro in yearly run cost, as keeping the As-Is 5MEuro yearly infra managed services. | |||
3 | Do we agree on all of the current project listed as Must do and the related investments (M365, Win11 roll-out, lifecycle management, Move to power Apps, Dataiku, …)? | Have major increase of cost (M365, Dataiku,...) Have business continuity (Webmethods, Windows 11,...) | |||
4 | Do we want to focus in 2026 already in App portfolio Rationalization and simplification through Microsoft (productivity, collaboration portfolio, project management tools) | Not achieving the 0.5M€ reduction in licenses in 2026 by having multiple similar solutions in the landscape | |||
5 | Do we want to postpone SIEM / SOC consolidation to Microsoft solution (Sentinel)? | Keep growing on Chronicle and assess Sentinel on Azure Gov via CMMC ⇒ Financial dyssynergy (double run) | |||
6 | Do we already want to move forward on creating the central data lake house? | Continue to invest in GCP and create more technical debt | |||
7 | Which current GCP use cases (pricing, PCF, …) do think will have a positive business case to move to Microsoft in 2026? | Not exit the GCP and exit the BI solutions. | |||
8 | Based on question 7 by when do we think we can exit the current BI solutions? | Have one year of double run if not all exited by end 2026 (dual run in 2027 in run cost 0.5MEuro = 0.1MEuro tableau + 0.4MEuro Qlik) | |||
9 | Endpoint Management study already carried out (patching mainly). Do we already want to do the whole endpoint management or do we only invest in hardening / direction & response in 2026 and transform the tool ecosystem in 2027. | Keep complex ecosystem of endpoint management solutions and postpone transformation. | |||
10 | Do we agree we further invest on the ITSM both workflow as toward the end user? And start improving the adoption of the key FO processes? | Ensure internal accountability and usage of processes resulting in not having external consultants & enable the different compliance needs | |||
11 | Do we agree we move forward with the SAM (minimal scope no full fledged solution)? | Do not achieve the savings of # MEuro by doing the SAM & ensure we would pass the audit on licenses | |||
12 | Do we agree to wait to transform our DMS portfolio and eLearning platforms? | Have one year of double run on those systems. | |||
4.2. Key Decisions - Quarter 2
Meeting Date: (Please enter the correct date)
| Initiative Name | People Involved - IT | People Involved - Business/GBS | Key Decision (GO/NO-GO) (Quarter to start) | Comments (Please include any comments you consider necessary and relevant) |
|---|---|---|---|---|
4.3. Key Decisions - Quarter 3
Meeting Date: (Please enter the correct date)
| Initiative Name | People Involved - IT | People Involved - Business/GBS | Key Decision (GO/NO-GO) (Quarter to start) | Comments (Please include any comments you consider necessary and relevant) |
|---|---|---|---|---|
4.4. Key Decisions - Quarter 4
Meeting Date: (Please enter the correct date)
| Initiative Name | People Involved - IT | People Involved - Business/GBS | Key Decision (GO/NO-GO) (Quarter to start) | Comments (Please include any comments you consider necessary and relevant) |
|---|---|---|---|---|
