CCISO Strategic Planning 4

Question 1

Which governance structure BEST ensures security strategic decisions receive appropriate executive-level oversight?

Accepted Answer

A security steering committee with C-suite and board representation

Answer

A security steering committee with executive and board members ensures strategic security decisions are vetted at the appropriate level of authority.

Question 2

In the context of CCISO strategic planning, 'strategic risk' is BEST defined as:

Accepted Answer

Risks that could prevent the organization from achieving its long-term business objectives

Answer

Strategic risk refers to high-level uncertainties that threaten the organization's ability to execute its long-term strategy.

Question 3

A CISO adopts an 'assume breach' philosophy in strategic planning. This approach PRIMARILY affects which planning element?

Accepted Answer

Detection, response, and recovery capability investments

Answer

Assume breach shifts strategic focus from prevention-only to robust detection, response, and recovery, accepting that perimeter breaches will occur.

Question 4

When integrating cybersecurity into enterprise risk management (ERM), the CISO's role is to:

Accepted Answer

Translate cyber risks into business-impact terms understood by risk and finance executives

Answer

The CISO bridges the gap between technical cyber risk and business risk language so that cyber risks are properly reflected in the ERM framework.

Question 5

Which approach ensures that security strategic planning remains relevant as the threat landscape evolves?

Accepted Answer

Embedding continuous threat intelligence review cycles into strategic planning

Answer

Incorporating ongoing threat intelligence into planning cycles ensures the strategy adapts to emerging risks without waiting for a full planning refresh.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Strategic Planning 4