Which statement best describes the Strategic planning step?

• A. Develop your objectives based on the organization's vision and mission, stakeholder risk appetite and opportunities
• B. Hire staff
• C. Implement security controls
• D. Create marketing materials

Answer: (A)

Strategic planning focuses on setting the long-term direction by defining objectives that fit the organization's vision and mission while considering stakeholders' risk appetite and available opportunities. This combination helps determine where to focus effort and resources, shaping the future path of the organization. That’s why developing objectives based on the organization's vision and mission, and taking into account stakeholder risk appetite and opportunities, is the best description of the strategic planning step.

Hiring staff describes building the team to execute plans, which is an operational/resource activity that follows after the strategy is set. Implementing security controls is an execution task focused on mitigating risk, not on setting overall direction. Creating marketing materials is a tactical activity aimed at communication and outreach, not the high-level planning process.