1.2 B Security Strategy

Vocabulary flashcards derived from the lecture on aligning security programs with business strategy.

Strategy

A way to get to a desired state, defining the approach for implementing security programs aligned with business objectives.

Road Map

A guiding document that outlines how to navigate towards achieving a desired end point or goal.

Long Term Objectives

Goals set to be achieved over an extended period, forming the top-level targets in a strategic plan.

Sub Objectives

Smaller, manageable goals that support the achievement of long term objectives.

Meaningful Metrics

Quantifiable values that provide insight into progress, helping to assess if objectives are being met.

Flexibility in Strategy

The ability to adapt a strategic plan in response to changing circumstances and unforeseen challenges.

CMMI

Capability Maturity Model Integration, a model initially for measuring software development processes, now used for various process improvements.

Desired State

The ideal condition of an organization’s security posture, including procedures and management practices.

COBIT

A framework for developing, implementing, monitoring, and improving IT governance and management practices.

Compliance Requirements

Legal and regulatory specifications that organizations must adhere to, such as HIPAA or GDPR.

Support for Information Security Systems

Obtaining approval and resources from senior management to establish effective security programs.

Policy Review Frequency

The regular assessment of security policies, recommended at least annually or as necessary based on risk.

Legal Constraints

Legal mandates that organizations must consider in developing their security programs.

Time Constraints

Limitations in time that affect the speed and efficiency of implementing security strategies.

Personnel Constraints

The limitations arising from resource availability and skill sets impacting the development and execution of security initiatives.

Planning Ahead

The proactive identification of potential constraints and making provisions to overcome them in strategy execution.