CISM: Certified Information Security ManagerDemo

An information security strategy should align security objectives, priorities, and investments with stakeholder requirements, including the organization’s business needs and risk appetite. Regulatory requirements and the risk register are important inputs to that strategy, but they do not by themselves establish its overall direction.