The preliminary steps to security planning include all of the following EXCEPT which of the following?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
The keyword within the question is: preliminary This means that you are starting your effort,you cannot audit if your infrastructure is not even in place.
Reference used for this question: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
The preliminary steps to security planning are crucial to ensuring the success of the security program. These steps include:
A. Establish objectives: The first step in security planning is to define the objectives of the security program. This involves identifying the specific goals of the program, such as protecting assets, ensuring employee safety, or complying with regulations.
B. List planning assumptions: The second step is to identify any assumptions that the security plan is based on. These assumptions can include things like the availability of resources, the effectiveness of security measures, or the behavior of potential threats.
C. Establish a security audit function: The third step is to establish a security audit function. This involves creating a process for regularly reviewing and assessing the effectiveness of the security program.
D. Determine alternate courses of action: The fourth step is to identify alternative courses of action that can be taken in the event that the security plan fails to achieve its objectives. This involves developing contingency plans and identifying potential response strategies.
Therefore, the correct answer to the question is C. Establish a security audit function is not part of the preliminary steps to security planning. However, it is still an important step in maintaining a successful security program as it allows for continuous evaluation and improvement of the security measures in place.