A prioritized, budgeted plan for the next 1-3 years of systems, security, and infrastructure, realistic enough to follow, flexible enough to survive change.