ISC Leadership And Organizational Management Practice Question
Which THREE of the following should be included in an annual strategic security plan?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Current state assessment of security maturity
A strategic plan must look at current maturity, future initiatives (projects), and the resources required to achieve those goals.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Current state assessment of security maturity
Why this is correct
You must understand where you are to plan where to go.
- ✓
Resource and budget requirements
Why this is correct
Strategic goals require the funding and personnel to be realized.
- ✗
A detailed list of every firewall rule
Why it's wrong here
This is operational data, not strategic.
- ✗
A list of all employee salaries
Why it's wrong here
This is confidential HR information, not part of a security plan.
- ✓
Proposed security projects and initiatives
Why this is correct
These are the steps to bridge the gap between current and future states.
About these practice questions
One of 219 original ISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.