Financial Planning ACCISO Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   Why is it important to communicate security financial plans to the finance department?

   • ATo avoid any oversight of security spending
   • BTo hide security costs from other departments
   • CTo ensure the budget is accurately recorded and aligned with financial policies
   • DTo delegate all security decision-making to the finance team
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A large enterprise has multiple business units, each with its own IT budget. The CISO wants to implement a new security awareness training platform that will be used by all business units. The CISO is considering a centralized funding model. What is the primary advantage of centralized funding for this initiative?

   • AIt ensures consistent implementation and reduces duplication of effort across business units
   • BIt allows each business unit to customize the training to its specific needs
   • CIt reduces the total cost by eliminating the need for any security awareness training
   • DIt shifts the financial risk of the program to the business units
   Reveal Solution Discussion Select an answer first
3. 48expert · hard

   A financial services firm is planning a major security transformation program. The program includes replacing legacy firewalls, deploying a new SIEM, and implementing a zero-trust architecture. The CISO has a fixed budget and must manage financial risk. The CFO is concerned about cost overruns and wants a mitigation strategy. Which approach best mitigates financial risk while still allowing the program to proceed?

   • APhase the program into smaller milestones with go/no-go decision points
   • BReduce the scope of the program to only the zero-trust architecture
   • COutsource the entire program to a single managed security service provider
   • DFund the entire program upfront to lock in vendor pricing
   Reveal Solution Discussion Select an answer first