Create two Scapple mind maps. In the first, show the key roles of the cybersecurity function internally and how the security group fits into the broader organization from a personnel reporting relationship.

In the second mind map, outline the clustering of each internal and external population group whose identities and access control-based privileges need to be managed, along with sample plan items that will be targeted to address risks pertinent to each. An example might be the identities and access control (with a plan heading) for suppliers.