What are the high-level outcomes a cyber strategy should deliver, and why should the strategy be endorsed at a senior level?

### What a good answer covers - Explain that the strategy should address current and emerging risks. - Include prevention, impact limitation, and improved recovery as intended outcomes. - Connect the strategy to business priorities and risk decisions. - Explain that senior endorsement supports organisation-wide direction and resourcing. ### The concept Cybersecurity affects operational choices across an organisation. Senior leaders set priorities, approve resources, and establish how risk is treated. The strategy should therefore be understood and endorsed at that level, then used to guide implementation. It is not enough to publish a document if decisions about suppliers, new systems, and skills do not reflect its objectives. ### Terms - **Recovery**: restoring systems and operations after an incident. - **Emerging risk**: a developing threat or weakness that may affect future operations. ### Remember The strategy must connect cyber goals to decisions that leaders can support.