Security Strategic Planning ACCISO Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of security strategic planning in an organization?

   • ATo select specific security technologies for immediate deployment
   • BTo align security initiatives with the organization's overall goals and objectives
   • CTo comply with all regulatory requirements without considering business impact
   • DTo define daily operational tasks for the security team
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary benefit of obtaining stakeholder buy-in for the security strategy?

   • AIt guarantees that all security risks will be eliminated
   • BIt eliminates the need for ongoing communication
   • CIt ensures that security initiatives receive the necessary support and resources
   • DIt allows the security team to work in isolation
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A CISO has developed a new security strategy that requires significant changes to how business units handle data. The strategy is technically sound but faces resistance from department heads who see it as an obstacle to their operations. What is the most effective way to obtain buy-in?

   • AOffer financial incentives to departments that comply with the new strategy.
   • BEngage department heads early in the strategy development process and communicate how the strategy supports their business goals.
   • CImplement the strategy quietly and inform departments only when changes affect them.
   • DPresent the strategy to the board and mandate compliance from all departments.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A mid-sized insurance company has a security budget that is 10% lower than the previous year. The risk assessment shows that the top risks are phishing, ransomware, and insider threats. The company's strategic goal is to expand into new markets, which will require increased data sharing with partners. The CISO must allocate the reduced budget. Which allocation best addresses the top risks while supporting the strategic goal?

   • AInvest heavily in advanced endpoint protection and email filtering, and reduce spending on partner data-sharing controls.
   • BInvest in a balanced set of controls: email security, endpoint detection, user behavior analytics, and partner data-sharing safeguards, while deferring non-critical projects.
   • CCut all security training to save money, since technical controls are more effective.
   • DFocus the entire budget on insider threat detection, since insider threats are often the most damaging.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security team is implementing a new access control system. The team has a project plan with specific tasks, timelines, and resource assignments for the next three months. At which planning level is this project plan operating?

   • ATactical planning, because it translates strategic goals into specific initiatives.
   • BRisk management planning, because access control is a risk mitigation measure.
   • CStrategic planning, because it aligns with the organization's security vision.
   • DOperational planning, because it involves day-to-day execution with specific tasks and timelines.
   Reveal Solution Discussion Select an answer first