Study. uk . com
  1. Home
  2. All questions
  3. Question 100

CISM study material · question 100 of 1000

A security manager is told to justify why security investments must be ranked rather than all funded. Which reasoning matches NIST's capital planning guidance?

  1. Ranking exists to reduce the number of items the board must review at each sitting, not to change which investments are made
  2. Ranking is a regulatory requirement that applies independently of the budget available in any given year, and must be evidenced at audit
  3. All security investments carry equal risk reduction, so the ranking is arbitrary and serves only to record a management preference
  4. Competition for limited budget requires funding to be directed to the highest-priority security investments
Show the answer

Answer: D. Competition for limited budget requires funding to be directed to the highest-priority security investments

NIST states that increased competition for limited budgets and resources requires organisations to allocate available funding toward their highest-priority security investments to afford appropriate security.

Source: NIST SP 800-100 (NIST) — Sec. 5.1 Legislative Overview

Challenge yourself on this topic → Study as cards