Financial Planning and Budgeting CCISO Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A CISO is preparing the annual security budget and wants to distinguish between ongoing operational costs and one-time project investments. The organization is implementing a new SIEM platform while also maintaining its existing firewall and antivirus subscriptions. Which budget structure best supports this distinction?

   • AA budget that combines all costs into a single contingency fund
   • BSeparate budgets for operations and capital projects
   • CA budget that only includes the new SIEM platform costs
   • DA single line item for all security expenses
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A large enterprise is restructuring its security funding. Currently, each business unit manages its own security budget, leading to inconsistent controls and difficulty enforcing enterprise standards. The CISO wants to improve consistency while still allowing business units to fund specialized security needs. Which funding model should the CISO recommend?

   • ACentralized funding for all security operations
   • BHybrid funding with core security services centrally funded and specialized controls funded by business units
   • CDecentralized funding with stronger governance guidelines
   • DA chargeback model where business units pay for security services based on usage
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which cost estimation technique involves using historical data from similar past security projects to estimate the cost of a new project?

   • AParametric estimating
   • BThree-point estimating
   • CBottom-up estimating
   • DAnalogous estimating
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A retail company's CISO is preparing the annual security budget. The company is expecting a period of rapid growth, with plans to open 50 new stores and launch an e-commerce platform. The CISO needs to decide which type of budget to use to best accommodate the variable costs associated with this expansion. Which budget type is most appropriate?

   • AZero-based budget where every expense must be justified from scratch.
   • BCapital budget that only includes major investments like new security systems.
   • CIncremental budget based on last year's spending plus a percentage increase.
   • DFlexible budget that adjusts based on activity levels, such as number of stores or transactions.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which of the following is a key input to forecasting future information security funding needs?

   • AThe personal preferences of the security team
   • BThe previous year's budget without any adjustments
   • CThe number of security certifications held by staff
   • DCurrent threat landscape and emerging attack trends
   Reveal Solution Discussion Select an answer first