CSL Strategic Planning & Leadership in Cybersecurity 3

Question 1

A CISO is presenting a security investment proposal to the CFO. Which approach BEST demonstrates the financial justification for a new security control?

Accepted Answer

Calculate the Return on Security Investment (ROSI) using risk reduction

Answer

ROSI quantifies risk reduction in financial terms, allowing security investments to be evaluated using the same criteria as other business investments.

Question 2

Which of the following BEST describes the concept of 'security by design' in strategic planning?

Accepted Answer

Integrating security requirements into projects from inception

Answer

Security by design means embedding security considerations into the planning and development phases of any initiative rather than retrofitting them later.

Question 3

A cybersecurity leader must manage competing priorities between security hardening and business agility. What strategic approach BEST resolves this tension?

Accepted Answer

Adopt a risk-based approach with agreed risk appetite thresholds

Answer

A risk-based approach with defined risk appetite thresholds allows informed trade-offs between security rigor and operational velocity.

Question 4

Which document formally defines the boundaries of authority and accountability for the CISO within an organization?

Accepted Answer

CISO Charter

Answer

A CISO Charter formally establishes the role's mandate, reporting lines, authority, and accountability within the organization.

Question 5

An organization's threat landscape has significantly evolved. What is the FIRST step a cybersecurity leader should take to update the security strategy?

Accepted Answer

Conduct a revised threat and risk assessment

Answer

Updating the threat and risk assessment ensures that strategy changes are grounded in an accurate current understanding of threats and vulnerabilities.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL Strategic Planning & Leadership in Cybersecurity 3