Your question is Prioritizing Security and Backups. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Imagine there is a critical security issue and a simultaneous failure in data backups; you have a fixed budget of $50k to address both. How do you prioritize your resources?