The primary objective of the strategy is to ensure that the management has visibility of the status of information security, to determine the priorities of development activities and to provide adequate resourcing to implement these.