CAS-003 · Question #827
A security program was allocated $2 million in funding for the year. The cybersecurity team identified the following potential projects to deliver: Which of the following solutions should the…
The correct answer is A. 1. Insider threat UEBA. When prioritizing security investments within a fixed budget, insider threat User and Entity Behavior Analytics (UEBA) typically delivers the highest measurable risk reduction relative to cost compared to large infrastructure builds or emerging technologies.
Question
A security program was allocated $2 million in funding for the year. The cybersecurity team identified the following potential projects to deliver:
Which of the following solutions should the cybersecurity team prioritize to obtain the BEST risk reduction within the allocated budget?
Exhibit
Options
- A
- Insider threat UEBA
- B
- Build SOC 2.0
- C
- ML/AI security analytics data lake
- D
- Blockchain decentralized identity
How the community answered
(34 responses)- A47% (16)
- B29% (10)
- C18% (6)
- D6% (2)
Why each option
When prioritizing security investments within a fixed budget, insider threat User and Entity Behavior Analytics (UEBA) typically delivers the highest measurable risk reduction relative to cost compared to large infrastructure builds or emerging technologies.
Insider threat UEBA targets one of the highest-impact and hardest-to-detect threat vectors by baselining normal behavior and alerting on anomalies. It is operationally focused, deployable without large infrastructure changes, and provides quantifiable risk reduction making it the best choice for maximizing return on a constrained security budget.
Building a SOC 2.0 is a large infrastructure and personnel investment with a long time-to-value horizon, consuming most or all of the $2M budget without delivering immediate or targeted risk reduction.
An ML/AI security analytics data lake is a foundational platform project requiring significant capital, integration work, and data maturity before it produces actionable risk reduction.
Blockchain decentralized identity is an emerging and unproven technology for most enterprise environments, carrying high implementation risk and uncertain risk reduction compared to established security controls.
Concept tested: Security budget prioritization and risk-reduction ROI
Source: https://www.nist.gov/cyberframework
Topics
Community Discussion
No community discussion yet for this question.