Yes interesting.
The difficulty is sometimes associated with unplanned projects, a security breach may cause you to re think your budget, or the business coming up with what they see as an urgent project.
What makes it even more difficult is the resources, because sometimes a new project comes with its own budget but you still have to find the resources to do it.
CIO .. not a role for the faint hearted!