Chapter 2: Information Security Strategy
Practice Question Set 1
Q. 1
Answer: B. To evaluate the current business strategy
Explanation: The first step for an information security manager is to understand and evaluate the current business strategy. This is essential to align the information security plan with the business strategy. The other options are subsequent steps.
Q. 2
Answer: D. Desired future state of information security
Explanation: A strategy plan should include the desired level of information security. This desired state will impact options A and B. A mission statement is a high-level statement that may not indicate the detailed desired state for information security.
Q. 3
Answer: B. To support the business objectives
Explanation: The primary objective of any security strategy is to support the business objective. Thus, it should be aligned with business objectives. Other options are secondary objectives.
Q. 4
Answer: B. Security objectives...
