How much should an organization spend on security? The simple answer: It depends.
Factors such as the sort of business the company is in, the types of personal or sensitive data or intellectual property it handles, the regulatory requirements it faces, the complexity of its IT infrastructure, the likelihood of it being a target for attacks, and other elements come into play.
The more important question might be: “How should an organization go about determining how much to spend on security?” The process enterprises go through to figure out their proper level of spending on security can be critical to effectively safeguarding systems and data.
