Outline strategic objectives that define where your organization needs to be to effectively manage security risks to its information assets such as: Data Loss Prevention Risk Management Crisis and Security Incident Management