The primary objective of the strategy is to ensure that management has visibility of the status of information security, to determine the priorities of development activ ities, and to provide adequate resourcing to implement these.