CCISO Strategic Planning 3

Question 1

A CISO uses Porter's Five Forces model during strategic planning. Which force directly relates to the risk posed by disruptive technology replacing existing security solutions?

Accepted Answer

Threat of substitute products

Answer

The threat of substitutes captures the risk that alternative technologies or approaches could render current security tools obsolete.

Question 2

In strategic planning, 'capability maturity' assessments help a CISO to:

Accepted Answer

Benchmark current security practices against a defined scale to prioritize improvements

Answer

Capability maturity models (e.g., CMM, C2M2) measure process maturity on a defined scale and guide investment in areas needing improvement.

Question 3

Which document typically serves as the top-level policy artifact that gives the CISO authority to enforce the security strategy?

Accepted Answer

Information security charter

Answer

An information security charter (or policy) establishes executive-level mandate for security governance and the CISO's authority.

Question 4

When prioritizing strategic security initiatives, a CISO should PRIMARILY consider:

Accepted Answer

Risk reduction value relative to business impact and available resources

Answer

Initiative prioritization must weigh risk reduction potential against business impact and resource constraints for maximum strategic value.

Question 5

A gap analysis in security strategic planning compares which two states?

Accepted Answer

Current security posture vs. desired future-state security posture

Answer

A gap analysis identifies the delta between where the organization is today and where it needs to be to meet strategic security objectives.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Strategic Planning 3