CSL CSL Cybersecurity Budget & Resource Allocation 1

Question 1

Which financial metric helps a CSL leader justify cybersecurity investments to the board?

Accepted Answer

Return on Security Investment (ROSI) quantifying risk reduction relative to cost

Answer

ROSI expresses cybersecurity investments in terms of risk reduction value, allowing business leaders to evaluate security spending using financial decision-making frameworks.

Question 2

What does the 'cost of a breach' model help cybersecurity leaders do?

Accepted Answer

Quantify potential financial impact of incidents to justify preventive investment

Answer

Cost-of-breach models estimate the financial consequences of security incidents, enabling leaders to demonstrate that prevention investments are economically rational.

Question 3

A CSL leader must allocate a limited security budget across competing priorities. What framework best supports this decision?

Accepted Answer

Risk-based prioritization aligning investments to highest-likelihood, highest-impact threats

Answer

Risk-based prioritization directs the most resources toward controls that address the most likely and impactful threats, maximizing security value from constrained budgets.

Question 4

Which budget category typically represents the largest proportion of cybersecurity spending?

Accepted Answer

Personnel costs (salaries, benefits, and training for security staff)

Answer

Personnel costs consistently represent the largest share of cybersecurity budgets because skilled security professionals command high salaries and are difficult to retain.

Question 5

What is the purpose of a cybersecurity business case when requesting budget increases?

Accepted Answer

Translate security needs into business risk and financial terms that executive decision-makers can evaluate

Answer

A security business case frames investment requests in terms of risk reduction, regulatory compliance, and financial impact rather than technical specifications that non-technical executives may not evaluate effectively.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL CSL Cybersecurity Budget & Resource Allocation 1