Six domains. Four tiers. An honest answer to the question every board is asking: are we actually ready for this?