Identify the business goals for the organization Make sure they align with the organization’s mission and vision statements

 Identify the business goals for the organization Make sure they align with the organization’s mission and vision statements. Note: These goals are usually created by the CEO of the company then translated into more specific goals for the levels below.

Then define and map the individual responsibilities for your division and respond to the CEO’s general strategy with an IT-focused statement of strategy and supporting goals.

These goals must be specific, measurable, achievable, and time-bound. Make sure to address for each :

1. Specific security functions, processes and people/roles.
2. Compliance standards, governing rules, regulations, etc. (at the international, federal, state, local, and industry specific legislation).
3. Applicable security policies.
4. Potential impacts to the organization should the security fail.

Next, translate the plans and goals you created into a division-specific tactical plan. Outlining the following:

1. How to achieve the high-level strategic plan.
2. What actions are required to achieve short-term goals.
3. Who has the responsibility for implementation?

Lastly, translate the plans and goals you created into a division-specific operational plan. Outlining the following:

1. How will resources be allocated to achieve short-term goals.
2. What will be the desired outcome?
3. How will progress be monitored.