When developing an organization's information security budget, it is important that the

The correct answer is A. expected risk can be managed appropriately with the funds allocated. When developing an organization's information security budget, it is important that the expected risk can be managed appropriately with the funds allocated. This means that the budget should be aligned with the organization's risk appetite, risk tolerance, and risk management…

Submitted by the_admin· Mar 5, 2026Security and Risk Management

Question

Options

Aexpected risk can be managed appropriately with the funds allocated.
Brequested funds are at an equal amount to the expected cost of breaches.
Crequested funds are part of a shared funding pool with other areas.
Dexpected risk to the organization does not exceed the funds allocated.

How the community answered

(22 responses)

A
77% (17)
B
5% (1)
C
5% (1)
D
14% (3)

Explanation

When developing an organization's information security budget, it is important that the expected risk can be managed appropriately with the funds allocated. This means that the budget should be aligned with the organization's risk appetite, risk tolerance, and risk management strategy, and that it should provide sufficient resources to implement the necessary security controls and measures to reduce the risk to an acceptable level.

Topics

#Security budgeting#Risk management#Cost-benefit analysis#Resource allocation

Community Discussion

No community discussion yet for this question.

Full CISSP Practice