Which action helps secure formal approval of the security budget?

Submitting the budget without supporting documentation

Avoiding any discussion of risks to keep the budget simple

Waiting until the final presentation to introduce the budget

Engaging stakeholders early and addressing their concerns

A security manager has received approval for a $500,000 security budget. The manager must ensure that expenditures stay within the approved amounts and that funds are used for their intended purposes. Which practice is most effective for achieving this?

Track expenditures only at the end of the fiscal year to reduce administrative overhead.

Spend the full budget as quickly as possible to avoid losing unused funds next year.

Set up a monthly review of actual expenditures against the budget, with variance analysis and approval for any reallocation.

Delegate all purchasing decisions to the IT procurement team to speed up the process.

A security manager is managing a fixed annual budget. In Q3, a new critical vulnerability is disclosed that affects a core business application. The vendor offers an emergency patch, but it requires additional testing and deployment resources. The budget has a small contingency reserve. The manager must decide how to fund this unplanned work without exceeding the budget. What is the best approach?

Request a budget increase from the CFO without first exploring internal reallocation.

Defer the patch until the next budget cycle to avoid using the reserve.

Use the contingency reserve to fund the testing and deployment, and document the expenditure as a risk-based adjustment.

Ask the application team to absorb the cost within their existing budget.

A security manager is preparing the annual budget proposal for a company that has never had a dedicated security budget. The CEO is skeptical about the need for security spending. Which approach is most likely to gain CEO approval?

Compare the company's security spending to that of competitors.

Ask the CEO to approve the budget based on industry best practices.

Present a detailed technical list of all the security tools the team wants to purchase.

Start with a high-level summary of the top security risks facing the company and the potential financial impact of a breach.

What is the FIRST step in preparing an annual security budget?

Submitting the budget for approval to the board

Identifying security requirements based on risk assessments and compliance obligations

Estimating the cost of each proposed security control

Aligning the budget with organizational strategic goals

Information Systems Security Management Professional

Domain 1Objective 8

1.8 Prepare, Obtain, and Manage Security Budget ISSMP Practice Questions (Page 2)

Part of the Leadership and Organizational Management domain, which accounts for 21% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

5concepts

21%of the exam

Questions 6–10

6foundation · medium
Which action helps secure formal approval of the security budget?
Select an answer first
7application · medium
A security manager has received approval for a $500,000 security budget. The manager must ensure that expenditures stay within the approved amounts and that funds are used for their intended purposes. Which practice is most effective for achieving this?
Select an answer first
8expert · hard
A security manager is managing a fixed annual budget. In Q3, a new critical vulnerability is disclosed that affects a core business application. The vendor offers an emergency patch, but it requires additional testing and deployment resources. The budget has a small contingency reserve. The manager must decide how to fund this unplanned work without exceeding the budget. What is the best approach?
Select an answer first
9application · medium
A security manager is preparing the annual budget proposal for a company that has never had a dedicated security budget. The CEO is skeptical about the need for security spending. Which approach is most likely to gain CEO approval?
Select an answer first
10foundation · medium
What is the FIRST step in preparing an annual security budget?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.