1.8 Prepare, Obtain, and Manage Security Budget ISSMP Practice Questions (Page 6)

Questions 26–27

1. 26expert · hard

   A security manager is preparing the annual budget for a company that is planning to migrate to the cloud. The migration will introduce new security requirements, but the current budget is based on on-premises controls. The manager must ensure the budget reflects the new environment. What is the best approach?

   • ADefer the cloud migration until the next budget cycle to avoid budget changes.
   • BConduct a new risk assessment for the cloud environment and build the budget from those requirements.
   • CUse the cloud provider's default security features and assume they are sufficient.
   • DKeep the current budget and add a small amount for cloud security tools.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security manager needs to convince the executive team to approve a significant increase in the security budget. The executives are focused on revenue growth and cost reduction. Which justification strategy is most likely to succeed?

   • ACompare the proposed budget to industry averages to show the company is under-spending.
   • BState that the budget increase is necessary to maintain compliance and avoid fines.
   • CPresent a risk-based business case that quantifies potential financial losses from security incidents and shows how the budget reduces that risk.
   • DEmphasize the technical details of the proposed security tools and how they work.
   Reveal Solution Discussion Select an answer first