Information Security Strategy Skill

🔴 AI FIRST Quality Principle

Apply the AI FIRST principle: never accept first-pass quality. Minimum 2 iterations. Read all output, improve every section. No shortcuts.

Purpose

Defines the information security strategy framework for Hack23 projects, integrating risk management with compliance requirements.

Security Strategy Pillars

1. Governance — Policies, procedures, roles
2. Risk Management — Identify, assess, treat risks
3. Compliance — ISO 27001, NIST CSF, CIS Controls
4. Operations — Monitoring, incident response
5. Assurance — Audits, testing, continuous improvement