Recommendations for investment in security technology should be PRIMARILY based on:

The correct answer is A. alignment with business needs.. Security technology investments must first and foremost align with business needs to be justified, prioritized, and successfully adopted. Security exists to enable the business, not the other way around. Risk tolerance (B) shapes how much risk the organization will accept but is

Submitted by rohit_dlh· Apr 18, 2026Information Security Governance

Question

Options

Aalignment with business needs.
Bthe organization's risk tolerance.
Cavailability of financial resources.
Dalignment with industry best practice.

How the community answered

(32 responses)

A
72% (23)
B
16% (5)
C
9% (3)
D
3% (1)

Explanation

Security technology investments must first and foremost align with business needs to be justified, prioritized, and successfully adopted. Security exists to enable the business, not the other way around. Risk tolerance (B) shapes how much risk the organization will accept but is secondary to business alignment. Financial resources (C) constrain what is possible but do not drive what is needed. Industry best practices (D) provide useful benchmarks but must be filtered through the lens of what the specific business actually requires. Business alignment ensures investments deliver meaningful value.

Topics

#Security Investment#Business Alignment#Strategic Security#Security Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice