The CISO is preparing the annual security budget. The CFO has asked for justification of the proposed spending on a new SIEM platform. Which approach best demonstrates the CISO's budgeting responsibility?

State that the SIEM is a best practice and therefore the budget should be approved without further discussion.

Ask the security manager to prepare the budget justification and submit it to the CFO directly.

Present a risk-based business case that quantifies the potential losses from undetected threats and compares the cost of the SIEM to those losses.

Allocate the budget to the SIEM without presenting a justification, since the CISO has final authority over security spending.

A company's security awareness program consists of an annual online training module. Despite this, employees continue to fall for social engineering attacks. The CISO wants to improve the program. Which change would most effectively foster a security-aware culture?

Making the annual training module longer and more detailed

Replacing the training with a poster campaign

Increasing the frequency of training to quarterly and adding simulated phishing exercises

Eliminating the training because it is not working

Which activity is a common way for a CISO to stay informed about emerging security trends?

Relying solely on information from security product vendors

Avoiding external information to prevent information overload

Reading only internal security reports

Participating in industry conferences and threat intelligence sharing groups

A company is establishing a security governance framework. The CISO has been asked to ensure that security policies are consistently applied across the organization. Which action is most aligned with the CISO's governance role?

Allowing each business unit to interpret policies as they see fit

Enforcing policies through technical controls only

Creating a policy exception process that requires business-unit approval and periodic review

Delegating policy development to the security engineers

What is a primary responsibility of the CISO in security budget planning?

To minimize the security budget to zero if no incidents have occurred

To justify the budget based on risk reduction and business value

To allocate the entire budget to the latest security technologies

To delegate all budget decisions to the finance department

EC-CouncilAssociate C|CISO

Domain 3Objective 1

The Role of the CISO ACCISO Practice Questions (Page 7)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

13concepts

Questions 31–35

31application · medium
The CISO is preparing the annual security budget. The CFO has asked for justification of the proposed spending on a new SIEM platform. Which approach best demonstrates the CISO's budgeting responsibility?
Select an answer first
32application · medium
A company's security awareness program consists of an annual online training module. Despite this, employees continue to fall for social engineering attacks. The CISO wants to improve the program. Which change would most effectively foster a security-aware culture?
Select an answer first
33foundation · easy
Which activity is a common way for a CISO to stay informed about emerging security trends?
Select an answer first
34application · medium
A company is establishing a security governance framework. The CISO has been asked to ensure that security policies are consistently applied across the organization. Which action is most aligned with the CISO's governance role?
Select an answer first
35foundation · easy
What is a primary responsibility of the CISO in security budget planning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.