Leadership Solutions

What is in Security's Strategic Plan

The importance of having an effective strategic plan or equivalent is universally accepted. Identifying the goals for the Security function and developing a plan to achieve those goals is necessary to define priorities and most importantly provides an opportunity to ensure alignment with business objectives.

In this Security Barometer, we set out to investigate Security’s strategic planning process including what is going into the strategic plans and what the ultimate purpose of the plans are.

Are Strategic Plans Standardized Within Organizations?

Each organization will have its own models regarding how strategic plans are published and communicated (or even if they are required or not). It depends on the culture of the organization as well as the expected role of the Security team. The results of this Security Barometer appear to indicate that roughly the same number of organizations use standardized or templated plans as those that don’t.

chart showing how strategic plan templates are used

How are Strategic Plans Used?

Whether they are used to influence senior management or to codify senior management’s desires, strategic plans should ultimately be used to guide decision making within the team. Clearly the worst thing to happen with strategic plans is to spend time to create them and then have them ignored. Unfortunately, almost 20% of respondents in the survey felt their strategic plans were ignored or rejected, and only 34% were using their strategic plan to influence management.

chart showing how strategic plans are most often used

What is Included in the Strategic Plan?

The actual elements that go into a strategic plan are usually determined by the organization’s culture. Some organizations expect certain components to make up a strategic plan that others would oppose. Try to obtain examples of strategic plans from other functional areas within your organization before searching externally since these likely will help indicate what your senior management expects.

The following provides some insight into the prevalence of strategic plan elements were with this survey cohort.

chart showing prevalence of strategic plan elements

Next Steps

The Security Executive Council is made up of successful organizational security executives with extensive experience creating and communicating security strategic plans. Contact us to find out how to tap into our body of knowledge.

The following is a PDF version of this page that you can download for future reference.

Click to download PDF file