Within cybersecurity management, the strategy establishes high-level direction and risk appetite to guide organisational ______.

### Why this is right The strategy gives the organisation a high-level direction for decisions about risk, people, processes, and technology. It is meant to inform choices, not merely document technical controls. ### The concept A strategy makes later decisions more coherent. When an organisation considers a supplier, new system, or staffing requirement, decision-makers can compare the proposal with the strategy’s objectives and risk appetite. That connection helps cybersecurity support the organisation’s mission rather than operate as a separate technical activity. ### Terms - **Decision-making**: the process of choosing among possible actions. - **Risk appetite**: the amount and type of risk an organisation is willing to accept. ### Remember A strategy is useful when it changes or clarifies real decisions.