What is the aim of strategic management in the case of information security?

What will be an ideal response?

The aim of strategic management in the case of information security is to ensure that all of the people, processes, and technologies that make up the organization's overall security response are working together to satisfy the business purpose. The assumption is that the security function is justified and correct if it directly supports what the business is trying to do. In order to ensure that effectiveness, the business has to undertake a formal, organization-wide effort to define, integrate, and maintain proper alignment between its business purposes and its security function.