If 20% of the cybersecurity budget were to disappear tomorrow, what would actually remain protected? Prevention, detection, incident response, compliance: not all of these pillars can be maintained at the same level. This session highlights the practical trade-offs that CISOs must make between risk management, financial pressure, and regulatory requirements. A clear-eyed discussion of what “prioritizing security” really means.