Isaca
CISM · Question #535
Which of the following would be MOST important to include in a proposal justifying investments for an organization's information security program?
The correct answer is A. Business requirements. Tying security investments directly to business requirements demonstrates how the spend supports organizational objectives and delivers value, which is critical for securing executive
Submitted by skyler.x· Apr 18, 2026Information Security Governance
Question
Which of the following would be MOST important to include in a proposal justifying investments for an organization's information security program?
Options
- ABusiness requirements
- BVulnerability scan results
- CCompetitor benchmark analysis
- DPrevious security budget
How the community answered
(34 responses)- A94% (32)
- C3% (1)
- D3% (1)
Explanation
Tying security investments directly to business requirements demonstrates how the spend supports organizational objectives and delivers value, which is critical for securing executive
Topics
#Security program justification#Business alignment#Investment proposal#Value proposition
Community Discussion
No community discussion yet for this question.