1.2 A Information Security Strategy Development

These flashcards cover key concepts related to developing effective information strategies using SMART metrics in the context of security and business objectives.

SMART Metrics

Specific, Measurable, Achievable, Relevant, Timely criteria for setting goals and objectives.

Specific

Goals should be clear and defined, not vague.

Measurable

Ensure that progress towards a goal can be tracked and measured.

Achievable

Goals should be realistic and attainable given available resources.

Relevant

Goals must align with the broader objectives and needs of the organization.

Timely

Goals need a specific timeframe for completion to avoid indefinite delays.

Security for the sake of security

Implementing security measures that do not contribute to business goals.

Tone from the top

Support and commitment from senior management towards security initiatives.

Enabler vs. Hindrance

The security function should facilitate business goals, not obstruct them.

Alignment of Security with Business Goals

Security objectives should support and enhance overall business objectives.