CSL CSL Cybersecurity Budget & Resource Allocation

Question 1

Which financial metric helps a CSL leader justify cybersecurity investments to the board?

Accepted Answer

Return on Security Investment (ROSI) quantifying risk reduction relative to cost

Answer

Gross profit margin

Answer

Marketing spend percentage

Answer

Employee turnover rate

Question 2

What does the 'cost of a breach' model help cybersecurity leaders do?

Accepted Answer

Quantify potential financial impact of incidents to justify preventive investment

Answer

Calculate IT help desk operating costs

Answer

Measure software development productivity

Answer

Forecast market share growth

Question 3

A CSL leader must allocate a limited security budget across competing priorities. What framework best supports this decision?

Accepted Answer

Risk-based prioritization aligning investments to highest-likelihood, highest-impact threats

Answer

Spending equally across all security domains

Answer

Allocating budget based on team size

Answer

Prioritizing the lowest-cost controls first

Question 4

Which budget category typically represents the largest proportion of cybersecurity spending?

Accepted Answer

Personnel costs (salaries, benefits, and training for security staff)

Answer

Hardware purchases

Answer

Travel and conference fees

Answer

Office supplies

Question 5

What is the purpose of a cybersecurity business case when requesting budget increases?

Accepted Answer

Translate security needs into business risk and financial terms that executive decision-makers can evaluate

Answer

List all known security vulnerabilities to alarm the board

Answer

Request identical budget to the previous year

Answer

Describe technical security tool features in detail

Question 6

How does the concept of 'risk appetite' influence cybersecurity budget decisions?

Accepted Answer

Organizations with lower risk appetite invest more in preventive controls to reduce exposure below their tolerance threshold

Answer

Risk appetite only affects marketing budgets

Answer

Higher risk appetite always means higher security spending

Answer

Risk appetite is set by IT staff, not leadership