Which of the following is the MOST valuable input for determining the approach to implement an organization's security strategy?

The correct answer is C. Risk environment of the organization. The organization’s risk environment provides the most valuable input for shaping a security strategy, as it defines the specific threats, vulnerabilities, and business impacts that the strategy

Submitted by anna_se· Apr 18, 2026Information Security Risk Management

Question

Which of the following is the MOST valuable input for determining the approach to implement an organization’s security strategy?

Options

AOperational objectives of each business function
BRisk tolerance level of each business function
CRisk environment of the organization
DIndustry-recognized framework

How the community answered

(31 responses)

A
13% (4)
B
3% (1)
C
77% (24)
D
6% (2)

Explanation

The organization’s risk environment provides the most valuable input for shaping a security strategy, as it defines the specific threats, vulnerabilities, and business impacts that the strategy

Topics

#Security Strategy#Risk Environment#Strategic Planning Inputs#Risk Assessment

Community Discussion

No community discussion yet for this question.

Full CISM Practice