Question

A newly appointed information security manager wants senior executives to approve funding for a multi-year security program. Previous requests were rejected because leadership viewed security spending as a cost with no measurable return. Which approach will BEST secure executive approval for the program?

Accepted Answer

Present a business case that links proposed security investments to reduced business risk, regulatory compliance, and enablement of strategic business objectives

Answer

Provide a detailed technical report showing gaps identified in the latest vulnerability scan and penetration test

Answer

Benchmark the organization's security spending against industry peers to show the company is underspending

Answer

Cite recent high-profile breaches at competitors and estimate the reputational damage the organization would suffer from a similar event