A government agency has approved a security strategy that includes implementing multi-factor authentication (MFA) across all systems. The CISO must ensure the implementation is governed and tracked. Which action is most important for effective implementation governance?

Set a single deadline for completion and do not monitor progress until that date.

Outsource the entire implementation to a vendor and rely on their reports.

Define clear roles and responsibilities for each implementation phase and establish a reporting cadence to track progress against milestones.

Purchase the MFA solution and let the IT team configure it without further oversight.

What is the primary purpose of strategic planning in the context of information security?

To document all security incidents and their resolutions for compliance purposes

To assign daily tasks to security team members

To align security initiatives with the organization's overall business goals and objectives

To select specific security technologies and tools for immediate deployment

A non-profit organization is developing a security strategy. The organization's mission is to provide humanitarian aid in conflict zones, where data sensitivity is high. What should be the primary objective of the security strategy?

Implement the same security controls used by large corporations.

Achieve ISO 27001 certification as quickly as possible.

Protect the confidentiality and integrity of beneficiary data while enabling mission-critical operations.

Minimize the security budget to maximize funds for aid programs.

EC-CouncilCertified Chief Information Security Officer

Domain 5Objective 1

Security Strategic Planning CCISO Practice Questions (Page 7)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~21% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~13–21 in this domain), expect 2–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

9concepts

Questions 31–35

31foundation · easy
Which tool is specifically designed to analyze both internal strengths and weaknesses and external opportunities and threats?
Select an answer first
32foundation · easy
Which analysis tool is most appropriate for examining the political, economic, social, technological, legal, and environmental factors that could impact an organization's security strategy?
Select an answer first
33application · medium
A government agency has approved a security strategy that includes implementing multi-factor authentication (MFA) across all systems. The CISO must ensure the implementation is governed and tracked. Which action is most important for effective implementation governance?
Select an answer first
34foundation · easy
What is the primary purpose of strategic planning in the context of information security?
Select an answer first
35application · medium
A non-profit organization is developing a security strategy. The organization's mission is to provide humanitarian aid in conflict zones, where data sensitivity is high. What should be the primary objective of the security strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Security Strategic Planning CCISO Practice Questions (Page 7)

Questions 31–35

Which tool is specifically designed to analyze both internal strengths and weaknesses and external opportunities and threats?

Which analysis tool is most appropriate for examining the political, economic, social, technological, legal, and environmental factors that could impact an organization's security strategy?

A government agency has approved a security strategy that includes implementing multi-factor authentication (MFA) across all systems. The CISO must ensure the implementation is governed and tracked. Which action is most important for effective implementation governance?

What is the primary purpose of strategic planning in the context of information security?

A non-profit organization is developing a security strategy. The organization's mission is to provide humanitarian aid in conflict zones, where data sensitivity is high. What should be the primary objective of the security strategy?

Keep studying — Strategic Planning, Finance, Procurement, and Vendor Management