CCISO Strategic Planning 2

Question 1

When conducting a SWOT analysis for information security strategy, which quadrant specifically examines internal deficiencies that could hinder security objectives?

Accepted Answer

Weaknesses

Answer

Weaknesses represent internal deficiencies such as skill gaps, legacy systems, or budget constraints that can undermine security goals.

Question 2

A CISO is tasked with aligning the security roadmap to a 3-year business transformation. Which planning horizon best describes this effort?

Accepted Answer

Strategic planning

Answer

Strategic planning addresses long-term goals (typically 3–5 years) and aligns security initiatives with overall business direction.

Question 3

Which framework is most commonly used to cascade high-level security strategy into measurable departmental objectives?

Accepted Answer

Balanced Scorecard

Answer

The Balanced Scorecard translates strategic vision into four perspectives—financial, customer, internal process, and learning—with linked KPIs.

Question 4

During strategic planning, a CISO identifies that a proposed cloud migration increases residual risk beyond the board's appetite. The BEST response is to:

Accepted Answer

Escalate findings and propose risk treatment options to leadership

Answer

The CISO should surface findings to decision-makers and present treatment options so leadership can make informed risk-acceptance decisions.

Question 5

What does the term 'security architecture roadmap' primarily define in strategic planning?

Accepted Answer

A prioritized sequence of security initiatives aligned to future-state objectives

Answer

A security architecture roadmap outlines the phased progression from the current security state to the desired future state.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Strategic Planning 2