Comparing A Security Strategic Plan To A Security Policy And Aligning To Security Controls

The information security strategic plan and security policies are strongly interrelated within an organization’s information security program. The security plan and security policies will drive the foundation and selection of security controls to be implemented within the organization.