Which of the following is MOST important to understand when developing a meaningful
information security strategy?

A.
Regulatory environment

B.
International security standards

C.
Organizational risks

D.
Organizational goals

Explanation:

Alignment of security with business objectives requires an understanding of what an organization
is trying to accomplish. The other choices are all elements that must be considered, but their

importance is secondary and will vary depending on organizational goals.