CyberSecurity: Governance and strategic planning in information security practice quiz

1. Because it sets out general business intentions, a mission statement does not need to be concise.

• True
• False

2. A clearly directed strategy flows from top to bottom rather than from bottom to top.

• True
• False

3. Values statements should therefore be idealistic; after all, they are meant to express the aspirations of the organization.

• True
• False

    

4. Tactical planning is the primary tool in determining the long-term direction taken by an organization?

• True
• False

5. Generally speaking, strategic plans are used to create tactical plans.

• True
• False