CISM Information Security Programme Practice Question
A security manager is designing a security budget for a mid-sized company. Which TWO of the following are typical components of a security budget?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Technology costs for security tools and infrastructure.
Security budgets typically include personnel costs (salaries) and technology costs (tools, software). Training and licensing are also common but may be subsumed under personnel or technology.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Technology costs for security tools and infrastructure.
Why this is correct
Tools like SIEM, firewalls are necessary.
- ✗
Legal fees for contract reviews.
Why it's wrong here
Legal fees are not typically part of security budget.
- ✗
Marketing budget for security awareness campaigns.
Why it's wrong here
Awareness is part of training, not a separate marketing budget.
- ✗
Office renovation for security operations center.
Why it's wrong here
Facilities costs are usually separate.
- ✓
Personnel costs for security staff salaries and benefits.
Why this is correct
Personnel is the largest budget component.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISM question from scratch — 871 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.