Computer Security Applicationsadvanced
Why should a cybersecurity strategy be tied to organizational objectives rather than treated as a separate technical plan?
Answer
It should protect assets and processes that support the organization’s goals. Business priorities help determine which risks matter most and which safeguards are appropriate. A strategy must also adapt as organizational needs and technology change.
Explanation
### The concept
Security decisions use organizational resources and affect how work is done. A strategy connected to business objectives can prioritize assets and risks according to their real importance. A purely technical plan may spend effort on systems without addressing the processes or information the organization depends on. The strategy should be reviewed as objectives, technology, and threats change.
### What a good answer covers
- How assets and processes support organizational objectives.
- Why priorities shape risk treatment and control selection.
- Why the strategy needs ongoing review.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free