HOME31 Enterprise Roadmap Working Form

HOME31 Enterprise Roadmap Template

Collectively define the strategic need, delivery roadmap, ownership, dependencies, risks and measurable outcomes.

Interactive Management Retreat Working Template

Initiative Name

Lead Department Select the department accountable for the initiative’s outcome, decisions and delivery.

Workshop Date

Overall Completion 0% Complete the roadmap sections below

Sections Complete 0 / 10 Use Next Incomplete to continue efficiently

Recommended Priority Not rated Score all six assessment criteria

Accountable Lead Not selected Primary owner for outcome and delivery

Complete one initiative at a time. Use the ERGA sample as a reference, then replace the example content with information agreed by participants. CPS facilitates and consolidates the discussion; the respective Lead Department and initiative owners remain accountable for the content, decisions and delivery.

Quick Start

Enter the initiative name, accountable Lead Department and workshop date. Select the HOME31 Strategic Pillar in Section 2.

Review the completed ERGA example before replacing it with your own initiative details.

Complete Sections 1–3 first to confirm the need, alignment and expected value.

Complete the Priority Assessment and review the automatically calculated priority.

Place major milestones across 2027–2031 and identify resources, ownership, dependencies and risks.

Define measurable KPIs, review the completed roadmap and export the form to Microsoft Word.

How to Write a Good Response

Be specific about the current problem, affected process and expected impact.
Use evidence, figures or known observations where available.
Describe outcomes rather than only activities or system features.
Identify who is accountable and who provides support.
Where details are unknown, write “To be validated” and state the required follow-up.

Weak answer:
“Improve reporting and efficiency.”

Better answer:
“Reduce manual consolidation time from five working days to one day by providing a governed enterprise dashboard.”

Using the Add and Remove Buttons

Add Milestone: creates another roadmap milestone row.
Remove Last Milestone: removes the last milestone while retaining at least one row.
Add Dependency / Risk / KPI: creates another entry for the relevant section.
Remove Last: removes only the most recently added row.
Review the last row before removing it because the action is immediate.

Understanding Priority Scoring

Score Strategic Alignment, Business Value, Customer Value, Financial Sustainability and Implementation Readiness from 1 to 5, where a higher score is better.
Score Risk Level from 1 to 5, where 1 means very low risk and 5 means very high risk.
The form reverses the Risk Level automatically using: 6 − Risk Level.
The overall score is the average of the five positive criteria plus the adjusted risk score.
The recommended priority remains subject to management judgement, affordability, capacity and portfolio balance.

Saving and Restoring Your Work

Save Draft: stores the latest form information in the current browser.
The form also saves automatically every 30 seconds.
Reload Completed Example: restores the full ERGA sample and replaces current unsaved changes.
Reset Form: removes the saved browser draft and reloads the form.
Browser drafts remain on the device and browser used to complete the form.

Exporting and Printing

Export to MS Word: downloads an editable Word-compatible document containing the latest form entries.
Print / PDF: opens the browser print function for printing or saving as PDF.
Review all roadmap fields before exporting the final document.

Important: The completed form is a retreat working document. Formal approval, budget commitment, procurement, implementation and accountability remain subject to the appropriate LPPSA governance process.

Core Roadmap Coverage The 10-section working flow covers strategic need through measurable success outcomes.

Strategic need: problem, importance and consequence

Strategic alignment: pillar, outcome and objective

Six expected-benefit categories

Six priority-assessment criteria and overall priority

Five-year milestones for 2027–2031

Investment, resources, technology and enablers

Lead, supporting divisions and stakeholders

Dependencies and impact of delay

Risks and proposed mitigations

KPI, baseline and 2031 target

Guideline for Completing the HOME31 Roadmap Form

Discuss one initiative at a time and complete the sections in sequence from strategic need to success measures.
Use clear, evidence-based responses. Avoid broad statements such as “improve efficiency” without explaining what will improve and how it will be measured.
Record agreed workshop inputs, not individual opinions that have not been discussed.
Identify the accountable Lead Department. Supporting divisions provide expertise and support but do not replace the accountable owner.
Use the example answers as a guide only. Replace them with information relevant to the actual initiative.
Where information is not yet confirmed, state “To be validated” and identify the responsible party and required follow-up.

Completed example: All sample answers are expanded automatically. You can still drag the lower-right corner of any answer box to make it taller.

MS Word export: The Export to MS Word button produces an editable Word-compatible document containing the latest information entered in this form, including scoring, roadmap selections, resources, ownership, dependencies, risks and KPIs.

How to use this template

Participants complete the template collectively during the retreat.
Each initiative should be discussed from strategic need through delivery, ownership and success measures.
CPS facilitates the discussion, captures agreed inputs and consolidates the final roadmap.
Formal approval remains subject to the appropriate LPPSA governance process.

1. Why Is This Initiative Needed?Sample completed

Describe the strategic problem, its significance and the consequence of not acting.

Questions to answer Verified

What problem are we solving?
Why is this important to LPPSA?
What happens if we do not act?

How to complete this section: explain the current problem, why it matters to LPPSA and the consequence of not acting. Focus on the business issue, not the proposed system or solution.

Current problemDescribe the existing gap, weakness, delay, duplication or risk.

Strategic importanceExplain the impact on mandate, customers, finance, governance or capability.

ConsequenceState what may happen if the issue remains unresolved.

Useful sentence starter: “Currently, the organisation relies on…, resulting in… If no action is taken, LPPSA may face…”

Example shown: ERGA addresses fragmented risk tracking, slow compliance reporting and limited enterprise-wide risk visibility.

Discussion Prompt	Participant Response
What problem are we solving?	1. Risk, compliance and control information is currently captured through separate spreadsheets, emails and departmental registers, resulting in fragmented records and inconsistent reporting. 2. Management reporting is largely retrospective. Emerging compliance breaches, control failures, fraud indicators and information-security concerns may only become visible after manual consolidation. 3. There is no single enterprise view linking strategic initiatives, operational risks, financial exposure, control ownership, remediation status and assurance findings. 4. Evidence supporting governance decisions is dispersed across divisions, making it difficult to confirm accountability, verify closure and maintain a reliable audit trail. 5. Current processes require substantial manual effort and do not provide timely alerts, trend analysis or predictive insight.
Why is this important to LPPSA?	1. LPPSA manages a significant public-sector housing financing portfolio and must protect institutional funds, customer information and public confidence. 2. Stronger governance supports compliance with statutory obligations, internal policies, Shariah requirements, anti-bribery controls, information-security expectations and audit recommendations. 3. A consolidated platform would allow management to identify material risks earlier, prioritise remediation and make decisions using current and traceable information. 4. The initiative strengthens the Governance Stewardship pillar by improving accountability, transparency, control effectiveness and enterprise-wide assurance. 5. It also supports Digital & Data Transformation by replacing fragmented manual registers with governed, integrated and reusable data.
What happens if we do not act?	1. LPPSA may continue to respond to risks only after incidents, audit findings or control failures have already occurred. 2. Repeated manual reconciliation may lead to incomplete records, duplicate actions, inconsistent risk ratings and delays in escalating critical matters. 3. Management may lack reliable evidence when prioritising resources, approving remediation plans or reporting to governance committees. 4. Failure to close issues promptly could increase financial, operational, regulatory, cybersecurity and reputational exposure. 5. The organisation may also incur higher long-term costs from duplicated systems, repeated assurance work and delayed corrective action.

2. Strategic AlignmentSample completed

Connect the initiative to HOME31 and the enterprise value it is expected to create.

Questions to answer Verified

Which HOME31 strategic pillar is the primary alignment?
What enterprise outcome will the initiative contribute to?
What strategic objective should be achieved by 2031?

How to complete this section: link the initiative to one primary HOME31 pillar, the enterprise outcome it supports and the specific objective it is expected to achieve.

The selected pillar is the strongest and most direct alignment. The enterprise outcome describes the value created, not merely the activity delivered. The strategic objective is specific and time-bound.

Example shown: the initiative aligns mainly to Governance Stewardship and Digital & Data Transformation.

Alignment Area	Participant Response
HOME31 Strategic Pillar	Select the primary HOME31 pillar most directly supported by this initiative.
Enterprise Outcome	Select the enterprise outcome that best describes the long-term value created.
Strategic Objective	Establish a single governed platform by 2031 that provides enterprise-wide risk visibility, automated alerts, traceable remediation, management decision support and integrated assurance reporting.

3. Expected BenefitsSample completed

State the intended outcome, not merely the activity to be performed.

Questions to answer Verified

What financial outcome is expected?
What customer outcome is expected?
What operational outcome is expected?
What governance outcome is expected?
What digital outcome is expected?
What people outcome is expected?

How to complete this section: describe the measurable change expected after implementation. Avoid listing deliverables such as “develop a dashboard”; instead state the outcome created by the dashboard.

Outcome test: complete the sentence, “As a result of this initiative, LPPSA will be able to…”

Benefit Category	Expected Outcome
Financial	Reduce avoidable financial losses, control leakage and duplicated assurance costs through earlier detection, prioritised remediation and stronger monitoring of material exposure.
Customer	Strengthen customer and stakeholder confidence through better protection of financing data, faster escalation of material issues and clearer evidence that identified risks are being addressed.
Operational	Replace fragmented spreadsheets and email-based tracking with one governed workflow covering risk identification, ownership, action tracking, escalation, evidence submission and closure validation.
Governance	Provide continuous compliance monitoring, clearer accountability, approval history, version control, immutable audit trails and timely reporting to management and governance committees.
Digital	Create a scalable data foundation for automated alerts, risk trend analysis, control analytics and future predictive risk-assessment capabilities, subject to governance and data-readiness requirements.
People	Reduce time spent on manual consolidation and develop staff capability in risk analysis, control advisory, data interpretation, issue prioritisation and strategic assurance.

4. Priority AssessmentSample completed

Score the initiative consistently and discuss trade-offs before placing it in the five-year roadmap.

Questions to answer Verified

How strongly does the initiative align to HOME31?
What business value will it create?
What customer value will it create?
How will it support financial sustainability?
How ready is LPPSA to implement it?
What is the implementation risk level?
What is the resulting overall priority?

How to complete this section: score each criterion independently using the evidence available. Record the reason for every score so another reviewer can understand the assessment.

Scores were agreed collectively, not entered by one person only. Risk Level was scored separately and reverse-calculated by the form. The recommended priority was reviewed against affordability, capacity and portfolio balance.

Example shown: scores are illustrative and should be challenged collectively during the retreat.

Assessment Criteria	Score (1–5)	Brief Rationale
Strategic Alignment		Directly supports HOME31 Governance Stewardship by strengthening oversight, accountability, transparency and protection of institutional funds.
Business Value		Creates one enterprise process for risk, compliance, control, remediation and assurance information, reducing duplication and improving management visibility.
Customer Value		Improves protection of customer information and service continuity by enabling earlier escalation and coordinated treatment of material control and security risks.
Financial Sustainability		Expected to reduce avoidable losses, repeated manual effort, duplicated systems and delayed remediation while improving prioritisation of control investment.
Implementation Readiness		Core requirements are identifiable, but readiness depends on approved governance processes, data cleansing, integration design, user training, ownership confirmation and phased change management.
Risk Level		Overall delivery risk is moderate because success depends on data quality, integration, user adoption, control ownership, vendor performance and sustained management sponsorship.

Overall Priority Score: 4.0High Critical High Medium Low

How the priority is calculated

Five positive criteria are scored from 1–5. Risk Level is also scored 1–5, but is reversed so that lower implementation risk contributes a higher adjusted score.

Overall = (Alignment + Business Value + Customer Value + Financial Sustainability + Readiness + (6 − Risk Level)) ÷ 6

Critical ≥ 4.2High 3.4–4.19Medium 2.6–3.39Low < 2.6

The calculated band is a decision aid. Management judgement, affordability, capacity, dependencies and portfolio balance still apply.

Initiative Priority Profile

5. Five-Year RoadmapSample completed

Identify the key milestones and place them across 2027–2031.

Questions to answer Verified

What are the major milestones?
In which year will each milestone occur between 2027 and 2031?

How to complete this section: list the major decision, design, implementation and benefit milestones only. Select the year in which each milestone is expected to occur.

2027–2028Typically planning, validation, design and early implementation.

2029–2030Typically pilot, rollout, adoption and operational stabilisation.

2031Typically optimisation, benefit confirmation and institutionalisation.

Example shown: selected years illustrate a phased roadmap from business case through optimisation.

6. Investment and ResourcesSample completed

Capture the initial resource implications for further validation after the retreat.

Questions to answer Verified

What is the estimated investment?
What resources are required?
What technology is required?
What key enablers must be in place?

How to complete this section: provide an initial estimate of the investment, people, technology and organisational enablers required. Exact figures are not mandatory during the retreat unless already available.

Where unknown: write “Indicative estimate to be validated through business-case assessment” rather than leaving the field blank.

Item	Details
Estimated Investment	Indicative investment to cover solution design, software licensing or platform development, implementation services, integration, data migration, cybersecurity assessment, training, change management and post-go-live support. Final cost remains subject to business-case validation and procurement approval.
Resource Requirements	Executive sponsor, accountable business owner, project manager, risk and compliance analysts, ICT architect, data and integration specialists, cybersecurity support, change-management lead, departmental coordinators and implementation partner.
Technology Requirements	Governed GRC or equivalent platform, secure cloud or approved hosting environment, role-based access control, audit logging, dashboard capability, workflow engine, document repository, reporting tools and secure integration with relevant enterprise systems.
Key Enablers	Clear enterprise governance model, approved risk taxonomy, common control and issue-management standards, clean source data, confirmed system ownership, executive sponsorship, departmental participation, adequate budget and structured change-management programme.

7. OwnershipSample completed

Identify the accountable lead and the divisions required to support delivery.

Questions to answer Verified

Which division is accountable as Lead Department?
Which divisions support delivery?
Who are the key stakeholders?

How to complete this section: identify the division accountable for delivering the outcome, the divisions that must support delivery and the stakeholders whose decisions or participation are essential.

Ownership rule: one Lead Department should be accountable. CPS facilitates and consolidates but does not own the initiative outcome.

Example shown: the Lead Department is accountable, while supporting divisions contribute within their respective mandates.

Role	Division / Stakeholder
Lead Department	Risk Management
Supporting Divisions	Information Technology Division, Internal Audit Department, Finance Division, Risk Management function, Integrity / Compliance stakeholders, Information Security and all participating business divisions.
Key Stakeholders	Chief Executive Officer, Board / governance committees, Heads of Division, project owners, Risk Management, Internal Audit, Finance, ICT, Information Security, Integrity / Compliance and appointed implementation partners.

8. DependenciesSample completed

Identify what must happen first and how delays could affect delivery.

Questions to answer Verified

What dependency or prerequisite must happen first?
What is the impact if it is delayed?

How to complete this section: identify prerequisites that must be completed before or during delivery. For each dependency, explain the practical consequence if it is delayed.

Common dependency areas: policy approval, budget, procurement, data readiness, system integration, staffing, governance decisions and external parties.

Dependency / Prerequisite	Impact if Delayed
Agree enterprise risk taxonomy, data standards, issue classifications and minimum mandatory fields, followed by cleansing and migration of relevant legacy records.	Poor-quality or inconsistent data would delay configuration, reduce confidence in reports and prevent reliable enterprise risk profiling.
Timely approval of the business case, funding envelope, sourcing strategy, procurement approach and implementation partner.	Any delay would shift design, procurement and mobilisation milestones and could reduce the time available for pilot testing and enterprise rollout.
Confirmation of enterprise process ownership, decision rights, approval levels and accountability for risk acceptance and issue closure.	Unclear ownership would cause workflow conflicts, delayed approvals and weak accountability after implementation.
Availability of secure integration interfaces and access to relevant source systems.	Limited integration would require continued manual data entry and reduce the value of real-time monitoring.
Completion of user awareness, SOP development, training and change-readiness activities.	Insufficient readiness would increase resistance, inconsistent usage and dependence on parallel manual processes.

9. Risks and MitigationSample completed

Record the most material risks and the proposed response.

Questions to answer Verified

What is the key risk?
What mitigation will reduce or manage it?

How to complete this section: record the most material uncertainties that could affect scope, cost, quality, timing, adoption or benefits. Each mitigation should describe a specific preventive or corrective action.

Risk statement format: “There is a risk that [event] may occur because of [cause], resulting in [impact].”

Key Risk	Proposed Mitigation
User resistance, inconsistent data entry or continued use of parallel spreadsheets may prevent the platform from becoming the authoritative enterprise record.	Implement phased onboarding, role-based training, departmental champions, clear SOPs, management reinforcement, adoption monitoring and retirement of duplicate manual registers after validation.
Solution design gaps, integration complexity, inadequate vendor capability or delayed delivery may affect scope, quality, cost and implementation timelines.	Use clear functional requirements, architecture review, proof of concept, milestone-based acceptance, service-level commitments, formal change control, contingency plans and regular steering oversight.
Inaccurate, incomplete or duplicated legacy data may produce unreliable dashboards and risk ratings.	Establish data ownership, cleansing rules, validation controls, reconciliation procedures and formal sign-off before migration.
Inappropriate access rights or weak configuration could expose sensitive risk, audit or customer-related information.	Apply least-privilege access, segregation of duties, row-level security, periodic access reviews, encryption, logging and security testing before go-live.
Scope expansion may increase cost and delay delivery before the core governance workflow is proven.	Define a minimum viable scope, prioritise critical use cases, maintain formal change control and phase advanced analytics or AI capabilities after core stabilisation.

10. Success MeasuresSample completed

Define measurable outcomes that demonstrate whether the initiative is delivering value.

Questions to answer Verified

What KPI or outcome measure will be tracked?
What is the current baseline?
What is the 2031 target?

How to complete this section: define KPIs that prove the initiative is creating value. Each KPI should include the current baseline and a measurable 2031 target.

MeasureWhat exactly will be tracked?

BaselineWhat is the current performance level?

TargetWhat level should be achieved by 2031?

Good KPI test: it should include a number, percentage, time, cost, volume or clearly verifiable status.

Example shown: the KPI compares the current 30-day resolution baseline against a target of under 48 hours by 2031.

KPI / Outcome Measure	Baseline	2031 Target
Average time taken to assign, investigate, remediate and formally close material operational compliance gaps.	30 calendar days average, based on current manual coordination.	Under 48 hours to assign and initiate action for critical gaps, with agreed closure timelines monitored through automated workflow.
Percentage of material risks and compliance issues recorded in the approved enterprise platform.	Fragmented departmental records with no consolidated baseline.	100% of material risks and compliance issues captured in the authoritative platform.
Percentage of overdue remediation actions.	Baseline to be established during discovery.	Less than 5% overdue, with all critical overdue actions escalated automatically.
Time required to prepare enterprise governance and compliance reporting.	Several working days of manual consolidation.	Standard dashboard available on demand, with formal committee pack preparation completed within one working day.
User adoption rate among designated risk, compliance and control owners.	No common enterprise platform.	At least 95% active monthly usage among designated users after enterprise rollout.
Audit-trail completeness for key governance actions.	Evidence stored across email, spreadsheets and shared folders.	100% of approvals, changes, comments and closure evidence time-stamped and traceable.

Key Milestone	2027	2028	2029	2030	2031