Add implementation guidance for each tier #4
Description
Each tier currently lists controls with descriptions, but lacks practical implementation guidance.
What's needed
For each tier, add:
- Prerequisites -- what an organisation should have in place before starting this tier
- Implementation order -- suggested sequence for adopting controls within the tier
- Success criteria -- how to know when a control is adequately implemented
- Common pitfalls -- mistakes practitioners frequently make at this maturity level
Acceptance criteria
- Tier 01 implementation guide
- Tier 02 implementation guide
- Tier 03 implementation guide
- Each guide reviewed by at least one practitioner