CSL Strategic Planning & Leadership in Cybersecurity 2

Question 1

A CISO needs to align the cybersecurity strategy with business objectives. Which framework is MOST appropriate for mapping security controls to business value?

Accepted Answer

SABSA

Answer

SABSA (Sherwood Applied Business Security Architecture) is specifically designed to derive security architecture directly from business requirements and objectives.

Question 2

When developing a multi-year cybersecurity roadmap, what should be the PRIMARY driver for prioritizing initiatives?

Accepted Answer

Risk-adjusted business impact

Answer

Prioritizing by risk-adjusted business impact ensures that security investments address the most significant threats to organizational value.

Question 3

An organization's board requests a cybersecurity strategy presentation. Which metric is MOST effective for demonstrating program maturity to non-technical executives?

Accepted Answer

Mean time to detect and respond to incidents

Answer

MTTD and MTTR metrics directly reflect operational resilience and are meaningful to executives because they represent real business risk reduction.

Question 4

Which leadership style is MOST effective when a cybersecurity leader must drive rapid adoption of new security controls across resistant business units?

Accepted Answer

Transformational

Answer

Transformational leadership inspires change through vision and motivation, making it most effective for driving cultural adoption of security practices.

Question 5

A company is expanding internationally. Which factor should the cybersecurity strategy address FIRST when entering a new jurisdiction?

Accepted Answer

Local data sovereignty and privacy laws

Answer

Data sovereignty and local privacy laws (e.g., GDPR, PDPA) create legal obligations that must shape the security architecture before operations begin.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL Strategic Planning & Leadership in Cybersecurity 2