What is the primary purpose of the introduction to a cyber strategy?

### Why this is right The introduction establishes the purpose and direction of the strategy. It connects cybersecurity to the organisation’s mission and states the broad outcomes the strategy is intended to support. ### The concept A strategy guides decisions rather than acting as a technical procedure. Its high-level objectives help leaders judge choices about new technology, staff skills, suppliers, and risk. Detailed implementation steps belong in later initiatives and the action plan. ### The other options - **B. To list every technical configuration required for each system**: configurations are implementation details, not the introduction’s purpose. - **C. To provide a complete record of all past security incidents**: the previous-year update may summarize incidents, but the introduction does not need a complete incident history. - **D. To replace the organisation's risk-management process**: the strategy informs risk decisions; it does not replace the wider process. ### Terms - **Cyber risk**: the possibility that a cyber-related event will harm information, systems, or services. ### Remember Use the introduction to explain why the strategy exists and what it is meant to achieve.