QuestionQ10

VerifiedSecurity and Risk Management

When is an organization required to review its information security strategic plan?

Explanation

The information security strategy is business-aligned; major changes to the business can change strategic objectives, risk exposure, regulatory obligations, and resource priorities. The plan must therefore be reviewed whenever such changes occur to preserve alignment. ISACA notes that shifts in business strategy and direction can require changes to the cybersecurity strategy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!