Security Strategic Planning ACCISO Practice Questions (Page 13)

Questions 61–62

1. 61application · medium

   A CISO is presenting the security strategic plan to the board. The plan includes a 5-year vision, annual goals, and a portfolio of initiatives. A board member asks how the plan will be implemented in the coming quarter. What should the CISO reference?

   • AThe security policy documents that define rules for daily operations.
   • BThe risk assessment report to identify what needs to be done immediately.
   • CThe tactical and operational plans that break down the strategic initiatives into quarterly projects and tasks.
   • DThe strategic plan itself, as it already contains detailed quarterly schedules.
   Reveal Solution Discussion Select an answer first
2. 62foundation · easy

   Which statement best describes the role of security strategic planning?

   • AIt provides a framework for making short-term, day-to-day security decisions
   • BIt is a one-time effort to create a security policy document
   • CIt bridges the gap between business objectives and security initiatives
   • DIt focuses solely on the technical implementation of security controls
   Reveal Solution Discussion Select an answer first