Assessing Corporate Cybersecurityintermediate
Explain why a cybersecurity strategy should align with business objectives.
Answer
Alignment ensures cybersecurity choices support organizational goals and direct resources toward relevant risks. It also helps the organization protect itself without unnecessarily hindering business growth.
Explanation
### Why this is right
A strategy provides direction and ensures decisions align with organizational goals. The course specifically notes that cybersecurity strategy should protect the business without hindering growth.
### The concept
Cybersecurity decisions involve priorities, resources, and actions, so they affect how the organization operates. If security decisions are disconnected from business objectives, safeguards may not address the risks that matter most to the organization or may impede legitimate work. Alignment means security planning is informed by the organization's goals and operating needs.
### What a good answer covers
- Strategy gives direction to organizational decisions.
- Security priorities should relate to business goals and risks.
- Resources should be allocated to support those priorities.
- Protection should be balanced with the organization's ability to operate and grow.
### Terms
- **Business objective**: A result an organization intends to achieve.
- **Resource allocation**: Assignment of organizational time, money, and personnel to priorities.
### Remember
Security strategy should protect the business in ways that support its goals.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free