Which of the following is the MOST important objective of business stakeholder involvement during information security strategy development?

Question

Options

• AObtaining information security funding
• BEnsuring organizational alignment
• CDefining organizational risk appetite
• DRequesting department head approval

• A
  5% (2)
• B
  72% (31)
• C
  16% (7)
• D
  7% (3)

Explanation

Ensuring organizational alignment is the primary objective of stakeholder involvement because an information security strategy that is not aligned with business goals, operations, and priorities will fail to gain support, funding, and adoption. Stakeholders bring the business context necessary to ensure security initiatives support - rather than hinder - organizational objectives. Obtaining funding (A) is a byproduct of alignment, not the goal itself. Defining risk appetite (C) is an important input from stakeholders but is a specific outcome, not the overarching objective. Requesting department head approval (D) is a procedural step, not a strategic purpose. Alignment ensures security is embedded into the business rather than bolted on as an obstacle.

No community discussion yet for this question.