Governance Gap Prioritization Template

{"Title":"Governance Gap Prioritization Worksheet","IntroductionHtml":"

Turn audit findings into prioritized, time‑boxed governance actions

This interactive worksheet helps you convert audit or assessment findings into a short, prioritized action backlog with clear owners and 90‑day sprint candidates. Use the scoring guidance below to score each gap for risk and effort. The form stores your entries so your team can track who is responsible and what to include in a 90‑day sprint.

Scoring guidance (how to prioritize)

• Risk (1–5): How much harm, regulatory exposure, operational impact, or business disruption could occur if this gap remains open? 1 = minimal, 5 = severe.
• Effort (1–5): Rough engineering and coordination effort to close the gap. 1 = low effort (quick fix), 5 = very high effort (major program).

Suggested quick priority formula (for reference): PriorityScore = Risk × (6 − Effort). High Risk + Low Effort gives the highest priority. Use the 2×2 risk/effort matrix: top-left = high risk/low effort (quick wins), top-right = high risk/high effort (roadmap projects), bottom-left = low risk/low effort (nice-to-have), bottom-right = low risk/high effort (deprioritize).

Below are slots for up to eight governance actions. If you have more gaps, submit multiple times or copy this worksheet for another batch.

","SubmitLabel":"Save Actions","SuccessMessage":"Your governance actions were saved. Use the data export or view the stored entries to plan sprints and communicate with stakeholders.","DataType":"governance-gap-prioritization","SchemaVersion":"1.0","Fields":[{"Key":"context_summary","FieldType":"textarea","Label":"Audit / Assessment summary (paste top findings or link to the report)","HelpText":"Paste key findings or a short summary so actions are traceable to the original audit. Include report name and date.","Required":false},{"Key":"batch_name","FieldType":"text","Label":"Batch name or sprint name","HelpText":"Give this set a meaningful name, e.g. 'Q3 Governance Sprint - Data Quality Gaps'","Required":false},{"Key":"action_count","FieldType":"select","Label":"How many actions will you enter in this batch?","HelpText":"Choose how many action rows you'll fill below (you can fill fewer than chosen).","Required":true,"ValueOptions":[{"Value":"1","Label":"1"},{"Value":"2","Label":"2"},{"Value":"3","Label":"3"},{"Value":"4","Label":"4"},{"Value":"5","Label":"5"},{"Value":"6","Label":"6"},{"Value":"7","Label":"7"},{"Value":"8","Label":"8"}]},{"Key":"action_1_title","FieldType":"text","Label":"Action 1 — Title","HelpText":"Short title: what will be done?","Required":false},{"Key":"action_1_description","FieldType":"textarea","Label":"Action 1 — Description","HelpText":"Describe the finding, root cause (if known), and the proposed action. Include references to datasets, systems, owners, or policies.","Required":false},{"Key":"action_1_risk","FieldType":"scale","Label":"Action 1 — Risk (1 low — 5 high)","HelpText":"Impact if left unaddressed.","Required":false,"Min":1,"Max":5},{"Key":"action_1_effort","FieldType":"scale","Label":"Action 1 — Effort (1 low — 5 high)","HelpText":"Estimated effort to close the action.","Required":false,"Min":1,"Max":5},{"Key":"action_1_owner","FieldType":"text","Label":"Action 1 — Owner (name or role)","HelpText":"Person or team responsible for delivery.","Required":false},{"Key":"action_1_compliance_vs_value","FieldType":"select","Label":"Action 1 — Tag: Compliance vs. Value","HelpText":"Is this primarily a compliance risk, a business/value improvement, or both?","Required":false,"ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_1_target_date","FieldType":"text","Label":"Action 1 — Target completion date","HelpText":"Enter a target date or sprint window (YYYY-MM-DD or human-friendly text).","Required":false},{"Key":"action_1_90day","FieldType":"yesno","Label":"Action 1 — Candidate for 90‑day sprint?","HelpText":"Mark yes for items you want the sprint team to consider.","Required":false},{"Key":"action_1_exec_notify","FieldType":"yesno","Label":"Action 1 — Notify executives?","HelpText":"Mark yes if an executive communication is recommended.","Required":false},{"Key":"action_1_legal_notify","FieldType":"yesno","Label":"Action 1 — Notify legal/privacy?","HelpText":"Mark yes if legal, privacy, or compliance teams should be looped in.","Required":false},{"Key":"action_1_notes","FieldType":"textarea","Label":"Action 1 — Notes / dependencies","HelpText":"Any dependencies, blockers, related tickets, or systems to coordinate with.","Required":false},{"Key":"action_2_title","FieldType":"text","Label":"Action 2 — Title","Required":false},{"Key":"action_2_description","FieldType":"textarea","Label":"Action 2 — Description","Required":false},{"Key":"action_2_risk","FieldType":"scale","Label":"Action 2 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_2_effort","FieldType":"scale","Label":"Action 2 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_2_owner","FieldType":"text","Label":"Action 2 — Owner (name or role)","Required":false},{"Key":"action_2_compliance_vs_value","FieldType":"select","Label":"Action 2 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_2_target_date","FieldType":"text","Label":"Action 2 — Target completion date","Required":false},{"Key":"action_2_90day","FieldType":"yesno","Label":"Action 2 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_2_exec_notify","FieldType":"yesno","Label":"Action 2 — Notify executives?","Required":false},{"Key":"action_2_legal_notify","FieldType":"yesno","Label":"Action 2 — Notify legal/privacy?","Required":false},{"Key":"action_2_notes","FieldType":"textarea","Label":"Action 2 — Notes / dependencies","Required":false},{"Key":"action_3_title","FieldType":"text","Label":"Action 3 — Title","Required":false},{"Key":"action_3_description","FieldType":"textarea","Label":"Action 3 — Description","Required":false},{"Key":"action_3_risk","FieldType":"scale","Label":"Action 3 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_3_effort","FieldType":"scale","Label":"Action 3 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_3_owner","FieldType":"text","Label":"Action 3 — Owner (name or role)","Required":false},{"Key":"action_3_compliance_vs_value","FieldType":"select","Label":"Action 3 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_3_target_date","FieldType":"text","Label":"Action 3 — Target completion date","Required":false},{"Key":"action_3_90day","FieldType":"yesno","Label":"Action 3 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_3_exec_notify","FieldType":"yesno","Label":"Action 3 — Notify executives?","Required":false},{"Key":"action_3_legal_notify","FieldType":"yesno","Label":"Action 3 — Notify legal/privacy?","Required":false},{"Key":"action_3_notes","FieldType":"textarea","Label":"Action 3 — Notes / dependencies","Required":false},{"Key":"action_4_title","FieldType":"text","Label":"Action 4 — Title","Required":false},{"Key":"action_4_description","FieldType":"textarea","Label":"Action 4 — Description","Required":false},{"Key":"action_4_risk","FieldType":"scale","Label":"Action 4 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_4_effort","FieldType":"scale","Label":"Action 4 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_4_owner","FieldType":"text","Label":"Action 4 — Owner (name or role)","Required":false},{"Key":"action_4_compliance_vs_value","FieldType":"select","Label":"Action 4 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_4_target_date","FieldType":"text","Label":"Action 4 — Target completion date","Required":false},{"Key":"action_4_90day","FieldType":"yesno","Label":"Action 4 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_4_exec_notify","FieldType":"yesno","Label":"Action 4 — Notify executives?","Required":false},{"Key":"action_4_legal_notify","FieldType":"yesno","Label":"Action 4 — Notify legal/privacy?","Required":false},{"Key":"action_4_notes","FieldType":"textarea","Label":"Action 4 — Notes / dependencies","Required":false},{"Key":"action_5_title","FieldType":"text","Label":"Action 5 — Title","Required":false},{"Key":"action_5_description","FieldType":"textarea","Label":"Action 5 — Description","Required":false},{"Key":"action_5_risk","FieldType":"scale","Label":"Action 5 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_5_effort","FieldType":"scale","Label":"Action 5 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_5_owner","FieldType":"text","Label":"Action 5 — Owner (name or role)","Required":false},{"Key":"action_5_compliance_vs_value","FieldType":"select","Label":"Action 5 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_5_target_date","FieldType":"text","Label":"Action 5 — Target completion date","Required":false},{"Key":"action_5_90day","FieldType":"yesno","Label":"Action 5 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_5_exec_notify","FieldType":"yesno","Label":"Action 5 — Notify executives?","Required":false},{"Key":"action_5_legal_notify","FieldType":"yesno","Label":"Action 5 — Notify legal/privacy?","Required":false},{"Key":"action_5_notes","FieldType":"textarea","Label":"Action 5 — Notes / dependencies","Required":false},{"Key":"action_6_title","FieldType":"text","Label":"Action 6 — Title","Required":false},{"Key":"action_6_description","FieldType":"textarea","Label":"Action 6 — Description","Required":false},{"Key":"action_6_risk","FieldType":"scale","Label":"Action 6 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_6_effort","FieldType":"scale","Label":"Action 6 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_6_owner","FieldType":"text","Label":"Action 6 — Owner (name or role)","Required":false},{"Key":"action_6_compliance_vs_value","FieldType":"select","Label":"Action 6 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_6_target_date","FieldType":"text","Label":"Action 6 — Target completion date","Required":false},{"Key":"action_6_90day","FieldType":"yesno","Label":"Action 6 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_6_exec_notify","FieldType":"yesno","Label":"Action 6 — Notify executives?","Required":false},{"Key":"action_6_legal_notify","FieldType":"yesno","Label":"Action 6 — Notify legal/privacy?","Required":false},{"Key":"action_6_notes","FieldType":"textarea","Label":"Action 6 — Notes / dependencies","Required":false},{"Key":"action_7_title","FieldType":"text","Label":"Action 7 — Title","Required":false},{"Key":"action_7_description","FieldType":"textarea","Label":"Action 7 — Description","Required":false},{"Key":"action_7_risk","FieldType":"scale","Label":"Action 7 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_7_effort","FieldType":"scale","Label":"Action 7 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_7_owner","FieldType":"text","Label":"Action 7 — Owner (name or role)","Required":false},{"Key":"action_7_compliance_vs_value","FieldType":"select","Label":"Action 7 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_7_target_date","FieldType":"text","Label":"Action 7 — Target completion date","Required":false},{"Key":"action_7_90day","FieldType":"yesno","Label":"Action 7 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_7_exec_notify","FieldType":"yesno","Label":"Action 7 — Notify executives?","Required":false},{"Key":"action_7_legal_notify","FieldType":"yesno","Label":"Action 7 — Notify legal/privacy?","Required":false},{"Key":"action_7_notes","FieldType":"textarea","Label":"Action 7 — Notes / dependencies","Required":false},{"Key":"action_8_title","FieldType":"text","Label":"Action 8 — Title","Required":false},{"Key":"action_8_description","FieldType":"textarea","Label":"Action 8 — Description","Required":false},{"Key":"action_8_risk","FieldType":"scale","Label":"Action 8 — Risk (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_8_effort","FieldType":"scale","Label":"Action 8 — Effort (1 low — 5 high)","Min":1,"Max":5},{"Key":"action_8_owner","FieldType":"text","Label":"Action 8 — Owner (name or role)","Required":false},{"Key":"action_8_compliance_vs_value","FieldType":"select","Label":"Action 8 — Tag: Compliance vs. Value","ValueOptions":[{"Value":"compliance","Label":"Compliance"},{"Value":"value","Label":"Value/Operational"},{"Value":"both","Label":"Both"}]},{"Key":"action_8_target_date","FieldType":"text","Label":"Action 8 — Target completion date","Required":false},{"Key":"action_8_90day","FieldType":"yesno","Label":"Action 8 — Candidate for 90‑day sprint?","Required":false},{"Key":"action_8_exec_notify","FieldType":"yesno","Label":"Action 8 — Notify executives?","Required":false},{"Key":"action_8_legal_notify","FieldType":"yesno","Label":"Action 8 — Notify legal/privacy?","Required":false},{"Key":"action_8_notes","FieldType":"textarea","Label":"Action 8 — Notes / dependencies","Required":false},{"Key":"communication_snippet_exec","FieldType":"textarea","Label":"Suggested executive communication (editable)","HelpText":"A short template your team can edit when notifying executives. Use placeholders like {BATCH_NAME}, {TOP_ACTIONS}, {RISKS}.","Required":false},{"Key":"communication_snippet_legal","FieldType":"textarea","Label":"Suggested legal/privacy communication (editable)","HelpText":"Template to notify legal/privacy teams. Include details, samples, and required next steps.","Required":false},{"Key":"submitter_name","FieldType":"text","Label":"Submitted by (name / role)","Required":false},{"Key":"submitter_date","FieldType":"text","Label":"Submission date","HelpText":"YYYY-MM-DD or leave blank to add later.","Required":false}]}