Which task focuses on Mission or Business Focus at the system level?

• A. System Stakeholders
• B. Information Types
• C. Enterprise Architecture
• D. Mission or Business Focus

Answer: (D)

The main idea being tested is tying the system’s purpose directly to the organization’s mission and business objectives. When you focus on Mission or Business Focus at the system level, you’re asking what mission-critical outcomes this system enables and how security choices support those outcomes. This means security decisions—what to protect most, which risks are acceptable, how resources are allocated, and how success is measured—are all grounded in how the system helps achieve the organization’s mission and key business goals. It also involves considering how the system supports essential business processes, the needs of stakeholders who rely on it, and how it contributes to staying compliant with mission-driven priorities and risk tolerance. In practice, this perspective guides prioritization and scoping: critical mission components and high-impact operations get attention first, ensuring that security can enable the organization to perform its core functions reliably.

By comparison, other options focus on different facets: identifying System Stakeholders is about who has a vested interest and their concerns; Information Types concerns how data is categorized and protected; Enterprise Architecture looks at the broader framework and standards across the organization. While all of those matter, they do not center the system’s security work around the organization’s mission and business objectives at the system level in the same direct way.