Explain how an organization can connect a business objective to the assets it protects when developing a cybersecurity strategy.

### Why this is right A strategy should protect assets in a way that supports the organization’s purpose. Tracing the objective through information, systems, and components helps reveal what could disrupt or undermine that objective. ### The concept For an e-commerce business, an objective such as providing online sales depends on customer and financial information, the application that processes orders, and the servers and networks that support it. The organization can assess the value and risks of those connected assets, then select suitable policies and controls. The approach should be revisited as the business or threat conditions change. ### What a good answer covers - State the business objective. - Identify the data and systems that support it. - Identify components that host, process, or transmit them. - Explain how risk and business value guide protections. - Include review and updating as ongoing activities. ### Terms - **Business objective**: a result the organization is trying to achieve. - **Component**: an individual part, such as a server, that supports a system. ### Remember Trace the objective down to the information and technology that make it possible.