CISM Information Security Programme Practice Question
A mature security program allocates 12% of IT budget to security. Which combination of budget components is most balanced for a program seeking to improve detection and response capabilities?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Personnel 40%, Technology 30%, Services 20%, Training 10%
For improving detection and response, investment in technology (SIEM, SOAR) and personnel (SOC analysts) is most critical, with services for assessments and training for skills.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Personnel 40%, Technology 30%, Services 20%, Training 10%
Why this is correct
This allocation prioritizes skilled staff and tools for detection/response.
- ✗
Personnel 20%, Technology 50%, Services 20%, Training 10%
Why it's wrong here
Underemphasizes personnel; detection/response requires skilled analysts.
- ✗
Personnel 50%, Technology 20%, Services 20%, Training 10%
Why it's wrong here
Technology investment is too low for detection tools.
- ✗
Personnel 30%, Technology 30%, Services 30%, Training 10%
Why it's wrong here
Services may be too high; operational focus is better.
Go deeper
Related to this question
About these practice questions
This CISM question is part of Courseiva's 871-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.