MENU
The mission and business process level is the Tier 2. What are the various Tier 2 activities?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B, C, D, E
Get Premium CSSLP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The mission and business process level is the Tier 2. It addresses risks from the mission and business process perspective. It is guided by the
risk decisions at Tier 1. The various Tier 2 activities are as follows:
It defines the core missions and business processes for the organization.
It also prioritizes missions and business processes, with respect to the goals and objectives of the organization.
It defines the types of information that an organization requires, to successfully execute the stated missions and business processes.
It helps in developing an organization-wide information protection strategy and incorporating high-level information security
requirements.
It specifies the degree of autonomy for the subordinate organizations.
32 comments · newest first
RE
Rene
10 months ago
E is a must, can't ignore the goals and objectives!
AN
Anisha
11 months ago
Wait, are we really prioritizing missions at this level? Sounds surprising!
MA
Maryrose
11 months ago
C seems a bit off for Tier 2, not sure about that one.
GL
Glendora
11 months ago
I think A is also super important for security.
DE
Denae
11 months ago
Definitely B and D are key activities!
EV
Evangelina
12 months ago
Prioritizing missions sounds right for Tier 2, but I’m torn about the information protection strategy. I need to double-check that one!
TW
Twana
12 months ago
I feel like specifying autonomy for subordinate organizations might be more of a Tier 3 activity. It’s a bit unclear to me.
AL
Aleshia
12 months ago
I think defining core missions and business processes is definitely a Tier 2 activity. It seems to align well with what we practiced in class.
SO
Sonia
1 year ago
I remember that Tier 2 activities focus on aligning information security with business processes, but I'm not sure if all these options fit that description.
FR
Frank
1 year ago
No problem, I've got this one covered. The key is to focus on the mission and business process level, which is Tier 2. The activities here include things like developing an organization-wide information protection strategy and defining the types of information the organization needs. I'll make sure to select all the correct options.
BR
Brendan
1 year ago
This is a good question, but I'm a little confused about the difference between Tier 1 and Tier 2 activities. I'll need to review my notes to make sure I understand the distinction before answering.
AR
Ardella
1 year ago
Okay, I think I've got this. Tier 2 is the mission and business process level, so the activities here are things like defining the core missions and business processes, prioritizing them, and specifying the degree of autonomy for subordinate organizations. I'll make sure to select all the relevant options.
CO
Corrie
1 year ago
Hmm, I'm a bit unsure about this one. The question is asking about Tier 2 activities, but I'm not entirely clear on what that means in this context. I'll have to think it through carefully.
SA
Sanjuana
1 year ago
This looks like a straightforward question about the various Tier 2 activities in the mission and business process level. I'll carefully read through the options and select the ones that apply.
MI
Mila
2 years ago
Wow, this question is like a cybersecurity treasure hunt! I'm gunna go with A, D, and E. Bet the exam writers are laughing their heads off at us right now.
RA
Ramonita
2 years ago
Yes, that's correct. Prioritizing missions and business processes is also crucial for achieving organizational goals.
JA
Jamal
2 years ago
I believe developing an organization-wide information protection strategy is one of the Tier 2 activities.
MA
Marnie
2 years ago
Hold on, is this a trick question? I'm feeling confident with A, D, and E. Defining the autonomy, that's a bit too specific for my liking. Let's keep it high-level, folks!
VE
Velda
1 year ago
I see your point, but I still think specifying autonomy for subordinate organizations is important for Tier 2 activities.
HA
Halina
1 year ago
Yeah, I think focusing on prioritizing missions and business processes aligns more with Tier 2 activities.
DE
Dean
1 year ago
I agree, let's stick with the high-level activities like developing the information protection strategy and defining core missions.
RE
Ressie
2 years ago
Alright, time to put on my thinking cap! I'm going with A, D, and E. Gotta love those organization-wide strategies and core missions, they're like the bedrock of the business.
SL
Slyvia
1 year ago
Precious: Absolutely, prioritizing missions and business processes is also essential for achieving organizational goals.
PR
Precious
1 year ago
User 2: I agree, developing information protection strategies and defining core missions are crucial for the organization.
CE
Cecil
1 year ago
User 1: Nice choices! Those are definitely key activities at the Tier 2 level.
LO
Lorean
2 years ago
Hmm, this looks like a job for a cybersecurity superhero! I'd say A, B, and E are the way to go. Defining those information types and prioritizing the missions is key, you know?
VA
Vallie
2 years ago
I agree, they help in defining the core missions and business processes.
AL
Alyce
2 years ago
Whoa, this question is like a maze of information security requirements! Let's see, I think A, D, and E are the right answers. Gotta love those high-level strategies and mission-critical processes, am I right?
JU
Justine
2 years ago
Absolutely, defining core missions and processes is essential for success.
ME
Melinda
2 years ago
Definitely! Prioritizing missions and business processes is key to achieving the organization's goals.
AL
Alease
2 years ago
I agree, A, D, and E seem like the correct answers. High-level strategies are crucial for information protection.
AL
Alberto
2 years ago
I think the Tier 2 activities are really important for the organization.