30-60-90 day onboarding project plan

Overview

Sets expectations: stabilize, observe, optimize—not “fix everything week one.”

Days 1–30 (Stabilize)

Credential transition complete, monitoring green on critical paths, backup verification first restore test, security baseline inventory published.

Days 31–60 (Harden)

MFA completion push, Conditional Access tier-1, patch compliance to target, documentation of top 10 apps, QBR deck skeleton.

Days 61–90 (Optimize)

Rightsizing / licensing savings proposals, DR drill tabletop, AD/Azure hygiene backlog groomed, vendor contract renegotiation support if scoped.

Governance

PSA project with milestones and executive steering monthly; RAID log visible to client sponsor.

Metrics

MTTR trend, critical vuln count, backup success—simple line charts beat fifty bullets.

Flexibility

Acquisitions or audits shove phases—re-baseline dates with written change, not silent drift.