Security Strategic Planning CCISO Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of a key performance indicator (KPI) for a security strategy?

   • AMean time to detect (MTTD) security incidents
   • BThe color of the security team's uniforms
   • CThe total number of employees in the organization
   • DThe number of security vendors used
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the first step in implementing a security strategy?

   • APurchasing all necessary security software
   • BConducting a security awareness campaign
   • CDeveloping an action plan with specific initiatives, timelines, and responsibilities
   • DHiring new security staff
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail company's security strategy was developed two years ago. Since then, the company has expanded into e-commerce and now processes online payments. The CISO wants to ensure the strategy remains relevant. What is the most appropriate first step?

   • AConduct a fresh environmental analysis, including a PESTLE and SWOT, to identify new threats and business changes.
   • BContinue with the existing strategy because it was approved by the board and should not be changed frequently.
   • CWait for a security incident to occur before updating the strategy.
   • DImmediately implement additional security controls for the payment system without reviewing the overall strategy.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a key benefit of effectively communicating the security strategy to stakeholders?

   • AIt ensures that the security team works in isolation
   • BIt guarantees that all security risks will be eliminated
   • CIt helps gain executive buy-in and support for security initiatives
   • DIt eliminates the need for security awareness training
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In the context of developing a security strategy, what is the primary role of a 'vision' statement?

   • ATo list specific security technologies to be implemented
   • BTo define the daily operational tasks of the security team
   • CTo describe the desired future state of the organization's security posture
   • DTo document past security incidents and lessons learned
   Reveal Solution Discussion Select an answer first