To achieve effective strategic alignment of security initiatives, it is important that:

A.
Steering committee leadership be selected by rotation.

B.
Inputs be obtained and consensus achieved between the major organizational units.

C.
The business strategy be updated periodically.

D.
Procedures and standards be approved by all departmental heads.

Explanation:

It is important to achieve consensus on risks and controls, and obtain inputs from various
organizational entities since security needs to be aligned to the needs of the organization. Rotation
of steering committee leadership does not help in achieving strategic alignment. Updating
business strategy does not lead to strategic alignment of security initiatives. Procedures and
standards need not be approved by all departmental heads