Explain that long-term strategic planning is critical to the information security program and that the planning effort should have specific clearly defined goals for the organization.
Discuss the organization of the planning process from the broad goals and vision of the organization down to the division and subsequent levels of the organization.
Remind students that the translation of goals at one level into actionable items at the next level depends on the skill of the executive in charge of that level and is more art than science.
Analyze and present to students that the executives are often the decision makers and may be referred to as the C-level or C-suite.