What the fuck is my information security "strategy"?

Making it up so you don't have to

Prioritize risk by training developers and facilitating executive support to invest in perimeter protection and log correlation

For the WIN!

What The Fuck Is My Information Security Strategy?