Exam CISM topic 1 question 76 discussion

how can you have requirements without identifying the resources?

If looking at resource requirements, why are we not looking at current resource level?

D. Information security strategy

D. Information security strategy is the MOST important for an information security manager to consider when identifying information security resource requirements, according to ISACA. The information security strategy outlines the organization's goals and objectives for protecting its information assets and provides a framework for identifying and prioritizing resource needs.

D. To identify the resources you need to meet information security requirements, you need to align to the overall information security strategy.

(C) Current resourcing levels