Which factor best supports the justification of a security program budget?

• A. Anecdotal stories
• B. Public opinion
• C. Internal budgets
• D. Benchmarking data showing cost-effectiveness

Answer: (D)

Objective, evidence-based value is what justifies a security program budget. When you present benchmarking data showing cost-effectiveness, you provide external, comparable proof of value that goes beyond internal spending alone. Benchmarking compares your costs and outcomes to those of similar organizations or industry standards, making it possible to demonstrate where your program stands and how efficiently it uses resources.

This approach translates security activities into measurable results, such as risk reduction, incident response improvements, or compliance gains, and ties those outcomes to dollar savings or avoided losses. That kind of data helps leadership see the return on investment and makes a stronger case for funding than interior budgets or subjective anecdotes.

Anecdotal stories are persuasive for individuals but lack generalizability; public opinion reflects feelings rather than security effectiveness; and internal budgets alone show allocation without indicating whether the spend is appropriate or competitive. Benchmarking data showing cost-effectiveness provides objective, actionable justification for the budget.