Intro to CSEbasic
In the Care Ltd example, intended outcomes describe desired results, while strategic initiatives describe work planned to achieve them.
Answer
true
Explanation
### Why this is right
The strategy separates what Care Ltd wants to achieve from the initiatives it proposes to deliver those results. For example, improved understanding of sensitive data is an outcome, while reviewing tools for data classification is an initiative.
### The concept
An outcome expresses a target condition, such as restricted access to information systems. An initiative is an action or programme of work, such as creating an access-control process or implementing a monitoring tool. Keeping the two distinct helps leaders test whether planned work actually supports the intended result.
### Terms
- **Access control**: rules and mechanisms that determine who may use a system or view information.
- **Data classification**: grouping information according to its sensitivity or handling needs.
### Remember
Ask “what should be true?” for an outcome and “what will we do?” for an initiative.
Related Questions
- Under the NIST Cybersecurity Framework (CSF), which activity is classified under the Identify function?(intermediate)
- Which item belongs in a strategy action plan according to the document?(intermediate)
- What is the primary purpose of the introduction to a cyber strategy?(basic)
- Why does a cyber strategy include a Respond section even when the organisation has strong preventive controls?(basic)
- Which intended outcome most directly relates to Detect?(intermediate)
Want to practise more questions like this?
Join myBenkio free and practise past questions for your Nigerian university courses with AI explanations for every answer.
Start Practising Free