Financial Planning and Budgeting CCISO Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a key advantage of a decentralized funding model for information security?

   • AIt guarantees that security budgets will be larger
   • BIt ensures that all security spending is consistent across the organization
   • CIt eliminates the need for a central security team
   • DBusiness units can tailor security investments to their specific needs and risks
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A CISO at a mid-sized financial services firm is developing the annual security budget. The firm's strategic plan includes expanding into two new international markets, which will require compliance with local data protection regulations. The CISO must also address a recent increase in phishing attacks targeting employees. The CFO has asked for a budget that clearly demonstrates the value of each security investment. The CISO has identified three initiatives: (1) a security awareness program to reduce phishing risk, (2) a data residency solution for the new markets, and (3) an upgrade to the SIEM platform. The CISO has limited budget and must prioritize. Which initiative should receive the highest priority?

   • AThe security awareness program, because it addresses the immediate phishing threat
   • BAll three initiatives should receive equal priority
   • CThe SIEM upgrade, because it improves overall visibility
   • DThe data residency solution, because it is required for the new market expansion
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A government agency's CISO is developing a five-year security budget plan. The agency expects to migrate several systems to the cloud and adopt a zero-trust architecture. The CISO also anticipates changes in federal cybersecurity regulations. What is the most effective way to forecast the security budget over this period?

   • ABase the forecast on the current year's budget and adjust for any known changes.
   • BCreate a multi-year financial model that incorporates planned initiatives, regulatory timelines, and projected threat trends.
   • CUse a flat annual budget with a fixed percentage increase for inflation.
   • DDevelop a budget only for the next fiscal year and update it annually.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A CISO is evaluating funding models for a new security operations center (SOC). The organization has multiple business units with different security needs. The CISO wants to ensure that the SOC provides consistent enterprise-wide monitoring while allowing business units to fund additional monitoring for their specific regulatory requirements. Which funding model is most appropriate?

   • ADecentralized funding where each business unit funds its own SOC services
   • BCentralized funding for the entire SOC, with business units contributing a fixed percentage of their revenue
   • CHybrid funding where the core SOC is centrally funded and business units can purchase additional monitoring services
   • DA chargeback model where business units pay for every SOC service they use
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A CISO is preparing a budget request for a new security operations center (SOC). The CFO is skeptical about the value of the SOC and asks for a business case. The CISO has data showing that the SOC would reduce the average time to detect and respond to incidents from 72 hours to 4 hours. The company's average cost of a security incident is $500,000, and they experience about 8 incidents per year. The SOC would cost $1.2 million per year to operate. What is the most compelling argument for the SOC?

   • AArgue that the SOC will improve the company's security posture and reduce risk.
   • BEmphasize that a SOC is a best practice and that competitors have one.
   • CCalculate the reduction in incident costs due to faster detection and response, and compare it to the SOC's operating cost.
   • DState that the SOC is necessary for compliance with industry standards.
   Reveal Solution Discussion Select an answer first