The best cybersecurity project approaches have a common characteristic. They convert vague concern into owned and scheduled tasks. Scope is clear. The group meets to log and review threats at a regular time. The group manages and supervises access. There is awareness among stakeholders of what is going on and why. Set up that structure at an early stage. The remainder of the project becomes a lot less stressful for all concerned when it comes to audits, releases, and incident