This guidance, produced by the National Cyber Security Centre, is intended to be used by businesses as a suggested activity plan. They suggest that it may be undertaken on a month-by-month basis over a suggested 12 month period to improve cyber resilience
The full report can be accessed on the National Cyber Security Centres website.