QuestionQ115Verified/Security and Risk ManagementCopy linkReport a problemAsk AstroTutorSave questionWhen creating an organization's information security budget, it is important that the:Arequested funds are at an equal amount to the expected cost of breaches.Bexpected risk can be managed appropriately with the funds allocated.Crequested funds are part of a shared funding pool with other areas.Dexpected risk to the organization does not exceed the funds allocated.Show AnswerAnswerExplanationAn information security budget should provide sufficient resources to implement and operate controls that manage the organization’s expected risk appropriately within its risk appetite.Show comments3Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion