Information security strategic planning is alignment of information security
management andoperation with enterprise and IT strategic planning. The pervasive
use and value of IT within organizations had resulted in an expanded notion of IT's
delivery of value to the organization to include mitigation of the organization's risk. IT
security is a concern at all levels of an organizatin's governance and decision making
processes, and information secuirty strategic planning is an essential component of
strategic planning. An information security strategic plan should be embodied in a
document that is approved by the appropriate executives and committees and is
regulary reviewed.
The topics to be included in strategic planning for information security:
Defining consistent and integrated methodologies for design, development and
implementation; Detecting and resolving problems; Reducing time to delivery from
solution concept through implementation; Provisioning flexible and adaptable
architectures; Proactively making decisions to more efficiently deliver results;
Eliminating redundancy to better support achievement of objectives; Planning and
