This roadmap is your capstone deliverable for Unit 5 — and the Education Plan component of your full PKIMM compliance evidence package. It brings together everything you've built across Units 0–5 into a structured, forward-looking commitment.
Complete every section. Be specific, vague intentions are not useful planning documents. When you're done, use the Preview button to generate a formatted version you can save, print, or submit as compliance evidence.
Transfer your results from the Unit 4 PKIMM self-assessment deliverable.
Based on your PKIMM self-assessment, identify the three most significant gaps, the areas where your organization (or your scope of responsibility) scored lowest or faces the most risk. Be specific: name the capability or system, not just the category.
Minimum three actions. Each must be specific and measurable, include what, who, and by when. Vague intentions are not useful. "Complete CBOM for all internet-facing systems" with a named owner and a target date is useful.
Based on Lesson 5.7: what is your next certification target? Be honest about your timeline and your preparation plan.
Based on Lesson 5.5: which working group will you join, and what is your specific first action?
From your CBOM and migration planning work: list the top three systems in your scope that need PQC migration, in priority order. Include why each is prioritized (risk level, harvest sensitivity, migration complexity).
PKIMM requires a documented forward commitment to periodic knowledge review. Set a specific date and method, this is the field that directly satisfies the Periodically Review Knowledge requirement.
Every honest learner finishes a course with new questions, not just new answers. What is the one question this course raised that you intend to pursue further? It can be technical, organizational, policy-related, or personal. There is no wrong answer, there is only a specific one and a vague one. Write the specific one.