Frequently Asked Questions
Answers to the questions our clients ask before reaching out.
How many years does the roadmap cover?
The roadmap typically covers 1 to 3 years, depending on the organization's IT maturity, ongoing projects, and investment capacity. Factero structures the plan in two distinct horizons: a short-term (12 months) with concrete actions, identified owners, and estimated budgets, and a medium-term (2-3 years) with directional guidance for future decisions. We deliberately avoid 5-year plans — experience from over 50 engagements shows that overly ambitious horizons stop being actively managed by year two and end up in a drawer. Prioritization draws on NIST-CSF for risk and cybersecurity components, and COBIT for IT governance. The roadmap is a living management tool, not a vision document — it's designed to be reviewed quarterly and adjusted as your organization evolves.
Will it recommend changing providers?
Possibly, but it's neither the goal nor the starting assumption. The roadmap starts from your business needs and IT reality — your current providers are part of that picture. Factero evaluates actual service levels, costs, and alignment with your objectives. If an adjustment is recommended — renegotiation, adding a complementary provider, or full transition — it's justified factually by the evaluation findings, not by preference. Our charter of independence guarantees we have no commercial ties to any provider, reseller, or MSP. We receive no referral commissions and resell no technology products. The charter's 12 articles are public and available on our website. This total neutrality is what gives the recommendation its weight — whether it's to stay, switch, or renegotiate.
Who needs to be involved in the process?
At minimum: leadership (GM or CFO), the IT team, and the managers of the most technology-dependent departments. Factero adapts involvement to the organization's structure. For municipalities and MRCs, we include the general director and sometimes the council — the roadmap must be owned by decision-makers who control budget and priorities. For SMEs, the CEO and IT lead (internal or external provider) often suffice. The fundamental goal is for the roadmap to be a shared commitment, not a consultant's document dropped on a desk. Factero's experience across 50+ engagements shows that plans that work are those where leadership was involved from the assessment phase — not just at the final presentation. Interviews take between 30 and 90 minutes per person and are conducted at your location or by video conference.
On what basis do you establish priorities?
Factero establishes priorities by cross-referencing two internationally recognized frameworks with your organization's concrete reality. The NIST Cybersecurity Framework (NIST-CSF) structures risk assessment and cybersecurity maturity — each project is positioned according to its impact on the framework's five functions (Identify, Protect, Detect, Respond, Recover). COBIT structures IT governance and alignment of technology investments with business objectives. These frameworks are then applied to your actual context: available budget, human resources, leadership's risk tolerance, operational constraints, and existing contractual commitments. The result isn't a theoretical compliance report — it's a prioritized action plan your team can actually implement, with realistic milestones and estimated budgets per phase. Each recommendation is classified into three levels: urgent, important, can wait.
How long does the planning process itself take?
The planning process takes 4 to 8 weeks, depending on organization size and availability of the parties involved. Factero structures the process in four distinct phases: current state assessment (interviews with IT team, leadership, and key departments), analysis and prioritization of issues using NIST-CSF and COBIT frameworks, roadmap construction with budgets and timeline, and final validation with decision-makers. Important: the process duration is not the roadmap duration. The process is the time to produce the plan — 4 to 8 weeks of work. The roadmap is the horizon it covers — typically 1 to 3 years. Interviews are conducted at your location or by video conference and take between 30 and 90 minutes per person. Impact on daily operations is minimal.