03. Strategic Planning

Question 1

Strategic Planning

In strategic planning, one or more persons develop the steps and resources required to do what

Answer 1

Achieve a desired end state

110

Question 2

Strategic Planning

A tool that a security leader may use to document the required steps to implement improvements to the organisations infromation security program - a list of steps required to achieve a strategic objective

Answer 2

Roadmap

110

Question 3

Strategic Planning

a security strategist can start to develop a roadmap after which 3 components have been completed and/or identified prior

Answer 3

1. Strategic objectives
2. Risk and Threat assessments
3. Gap Analysis

110

Question 4

Strategic Planning

Organisations will likely require one of these to be developed prior to approving expenditure on significant security initiatives

Answer 4

Business Case

111

Question 5

Strategic Planning

A written statement that describes the initiative and describes its business benefits

Answer 5

Business Case

111

Question 6

Strategic Planning

2 approaches that a security leader may take when developing a business case

Answer 6

1. Long range plan encompassing all elements OR;
2. Business case for each individual component

If choosing the individual component approach, each business case should show how each respective omponent contributes tot he whole

111

Question 7

Strategic Planning

The 7 key elements typically included within a business case

Answer 7

1. Problem statement
2. Current state
3. Desired state
4. Success criteria
5. Requirements
6. Approach
7. Plan

111

Question 8

Strategic Planning

A business document that annoucences a project, describes it, and solicitis potential bids from vendors to understand associated costs to realise the desired objective of the project

Answer 8

Request for Proposal
(RFP)

112

Question 9

Strategic Planning

Business cases should include which 2 following characteristics

Answer 9

1. Alignment with the organisations
2. Statement in business terms

1. Business case shuld align with organisations goals and objectives, risk appetite and culture
2. Problem statement, current state, future desired state but expressed in business terms. Think about financial benefits to be realised etc..

112