GIAC GSTRT : GIAC Strategic Planning, Policy, and Leadership (GSTRT)

What is the primary purpose of a cybersecurity policy review process?
Response:

• A. To reduce the complexity of the policy
• B. To remove outdated sections without consulting stakeholders
• C. To ensure the policy remains relevant to new threats and regulatory changes
• D. To simplify the policy so that it covers only basic security measures

Which of the following is the best practice for maintaining the relevance of cybersecurity policies as technology evolves?
Response:

• A. Assuming that current policies will always be relevant
• B. Writing policies that are deliberately vague
• C. Conducting regular policy reviews and incorporating feedback from IT, legal, and compliance teams
• D. Limiting policy updates to only when a security incident occurs

How does benchmarking help in the analysis of a security program?
Response:

• A. It eliminates the need for internal audits
• B. It simplifies compliance with regulations
• C. It reduces the workload of the security team
• D. It compares the program against industry standards and peers to identify strengths and weaknesses

What is the role of emotional intelligence in effective leadership within a cybersecurity team?
Response:

• A. It allows leaders to suppress emotions in decision-making
• B. It is not relevant in cybersecurity leadership
• C. It allows leaders to understand and manage their own emotions and the emotions of others, leading to better collaboration
• D. It helps leaders manipulate team members to achieve goals

What is the primary purpose of managing cybersecurity policies within an organization?
Response:

• A. To ensure policies are regularly updated, enforced, and aligned with organizational goals
• B. To establish policies and leave them unchanged for several years
• C. To make policies flexible enough for employees to interpret them as they wish
• D. To create complex policies that are difficult to understand