A signed 90-day HR triage plan is the single document that converts an inherited mess into a project with milestones. The plan tells your CEO what gets fixed, what gets deferred, and what residual risk the company accepts. This guide walks through the exact framework — risk map, exposure pricing, three-phase timeline, and resource ask — that produces a CEO signature in one meeting.

This is the planning companion to our pillar on fixing broken HR operations. The pillar argues why this document is required. This piece tells you how to build it.

Before You Start

You need three inputs in hand before drafting the plan. First, a one-page risk inventory listing every known problem area — I-9, benefits feed, payroll accuracy, timesheets, leave, performance, vendor relationships. Second, a rough dollar-exposure estimate for each red-tier item. Third, a clear sense of your own capacity — how many hours per week realistically go to cleanup versus day-to-day operations.

If you do not have the risk inventory, the first week of the plan is building it. Do not skip this step. A plan built on assumptions instead of inventory will fail at the first surprise.

Step 1: Build the Risk Map

One page, four columns: process area, what is broken, exposure if uncorrected, exposure timeline. Score each row red, yellow, or green per the framework in the pillar. Red is statutory penalty, regulatory deadline, or active financial bleed. Yellow becomes red within 90 days. Green is everything else.

Red rows are your 90-day work. Yellow rows are your next quarter. Green rows are stated and deferred. The risk map fits on a single page so it can be presented and signed in one meeting.

Step 2: Price the Exposure

For each red row, attach a dollar figure or a range. Carrier overpayment with a known balance gets the actual number. I-9 gaps get a range based on per-violation penalty schedule times the number of gaps. Payroll errors get an estimate based on the audit scope.

The pricing matters because the plan asks for resources. CEOs approve resources against quantified risk. They do not approve resources against vague stress. “We have $241,000 in carrier overpayment exposure and approximately $50,000 in I-9 penalty exposure” gets a signature. “I am overwhelmed” gets sympathy.

Step 3: Draft the Three-Phase Timeline

Phase one, days 1–30: stop the bleeding. Freeze any process that is actively producing new errors. Lock the forward process for I-9, benefits, timesheets, and payroll. Do not start historical cleanup yet.

Phase two, days 31–60: historical cleanup on the highest-exposure items. Carrier feed reconciliation. I-9 inventory match and substantive error sweep. Three-way salary reconciliation between offer letters, HRIS, and payroll.

Phase three, days 61–90: documentation, templates, and forward-process verification. Write the audit memos. Configure the templates that prevent recurrence. Spot-check the forward process to confirm new errors are not being created.

Yellow-tier items get deferred to the next 90-day cycle. Green-tier items get stated, dated, and parked.

Step 4: Make the Resource Ask

The resource ask is specific: a named role for a named duration with a named dollar figure, framed against the exposure it resolves. “A benefits specialist contractor for six weeks at $15,000 to resolve the $241,000 carrier overpayment” is a one-sentence ask with a clear ROI argument.

Common asks: a contractor for 4–8 weeks on a specific cleanup task, a benefits broker consultation for a carrier reconciliation, an employment attorney retainer for I-9 audit defense, an HRIS implementation partner for configuration work. Each one has a dollar value and a defined scope.

If the answer is “no budget,” the plan still proceeds — with the deferrals and residual risk explicitly stated and signed. That is the protection. Without the signature, you carry the risk personally.

Step 5: Define the Weekly Update Cadence

Three sentences per item, weekly, in writing. What you found. What it means financially or legally. What you are doing about it. Email, slack, or a one-pager — the medium does not matter as long as it is consistent.

The cadence has two effects. First, your CEO stops being surprised by findings — they are learning about them in real time. Second, when you eventually ask for more help, you are not introducing the problem. You are escalating something already in the conversation.

Step 6: Get the Signature

Schedule a 30-minute meeting with your CEO. Bring two pages: the risk map and the 90-day timeline. Walk through it once. Identify the decisions you need from them — resource approval, deferrals to accept, residual risk to acknowledge. Get the signature in the meeting if possible. If not, send the document and ask for sign-off within five business days.

If your CEO will not sign, document the meeting in a follow-up email summarizing the discussion. The email becomes the record. Either you get a signature or you get a documented escalation path.

How to Know It Worked

The plan worked if: the risk map is signed; the 90-day timeline is signed; the weekly update cadence is running; and you have a defined process for handling new requests that lands them in the right tier rather than at the top of your queue.

At day 90, run a one-page recap: what was completed, what was deferred, what residual risk was carried, and what the next 90-day cycle will address. Get that signed too. Repeat for the next cycle.

Common Mistakes

Building the plan without a risk inventory. Assumptions are not the same as data. Spend the first week building inventory.

Burying the resource ask at the end of a long document. Lead with the ask. CEOs read the first paragraph and the last paragraph. Make both count.

Failing to define what “deferred” means. Deferred items still need a date when they will be addressed. Without a date, they reappear as crises.

Treating the plan as a one-time exercise. The 90-day cycle is the operating rhythm. Renew, sign, repeat.

Next Steps

For the broader framework that explains why this plan structure works, return to the pillar. For the specific I-9 cleanup methodology that fits into phase two of your timeline, see our I-9 audit guide. For the benefits feed work, see our carrier reconciliation guide.