In defining a strategic security plan for an organization, what should a CISO first analyze?

A. Reach out to a business similar to yours and ask for their plan

B. Set goals that are difficult to attain to drive more productivity

C. Review business acquisitions for the past 3 years

D. Analyze the broader organizational strategic plan








 

Suggested Answer: D



Reference:
https://securityintelligence.com/the-importance-of-building-an-information-security-strategic-plan/


This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.