712-50 Question 193
Single answerPersonal Development PlanningA newly appointed CISO has completed a skills assessment and found two immediate gaps in the security leadership team: weak financial business-case development for security initiatives and limited succession depth for incident response leadership. The CEO has asked for a 12-month personal development plan for the CISO's direct reports that improves leadership capability without disrupting current operations. Which action is the BEST way for the CISO to structure this plan?
- A
Require all direct reports to attend the same external security leadership training course and evaluate success based on course completion.
- B
Create individualized development plans tied to business objectives, include measurable competency targets, assign stretch responsibilities and mentoring, and review progress quarterly.
- C
Delay development planning until the annual performance review cycle so goals can be aligned with compensation and promotion decisions.
- D
Focus the plan on obtaining advanced technical certifications for all direct reports because certifications provide the most objective measure of leadership readiness.
Show answer and explanation
Correct answer: B
Explanation
The best answer is to build individualized development plans linked to business outcomes and reviewed regularly. In executive security leadership, personal development planning should support strategic capability building, not just training attendance or credential accumulation. Common best practices in leadership development and workforce planning emphasize assessing current versus target competencies, aligning development objectives to business needs, defining measurable outcomes, and using a mix of methods such as coaching, mentoring, job rotation, and stretch assignments. For this scenario, the CISO must address both business acumen and succession risk, which requires tailored plans rather than one-size-fits-all training. Quarterly reviews are appropriate because they allow course correction while preserving operational continuity. This approach aligns with broadly accepted talent management and succession planning practices used in executive leadership development.
- A. Incorrect.
This is incorrect because a uniform training approach does not address role-specific gaps or the business context. In the scenario, one gap is financial business-case development and another is succession depth for incident response leadership. A single course may raise general awareness, but it is unlikely to build targeted capability or establish a practical leadership pipeline. Course completion is also an activity metric, not an outcome metric.
- B. Correct.
This is correct because effective personal development planning for senior security leaders should be individualized, aligned to organizational needs, and measured against clear outcomes. Tying plans to business objectives ensures development supports enterprise priorities, such as stronger funding justification and resilience in incident leadership. Stretch assignments, mentoring, and periodic reviews are practical methods for developing executive capability while maintaining operational continuity.
- C. Incorrect.
This is incorrect because postponing development planning creates unnecessary delay and treats development as an HR event rather than a strategic leadership responsibility. Although alignment with performance management is useful, urgent capability gaps should be addressed promptly, especially when they affect budget influence and operational resilience. Waiting for the annual cycle also reduces agility and weakens succession planning.
- D. Incorrect.
This is incorrect because technical certifications can be valuable, but they are not the best primary mechanism for closing leadership gaps such as executive communication, financial justification, and succession readiness. This option reflects the common misconception that technical depth alone equates to leadership maturity. In this scenario, targeted developmental experiences are more relevant than broad certification goals.