The security strategy document defines and prioritizes information assurance and security initiatives that the organization must commence to enhance the protection of information and related technology.