- When making the case for the security budget, it is critical to find metrics that succinctly describe the value of information security and do so in business terms.
- One of the most common methods is benchmarking against peers, although obtaining such information is not easy.
The perennial problem of how to obtain the funding necessary to keep critical enterprise assets secure is a frequent subject whenever IT security executives get together. Judging by a few surveys conducted over the last year, it appears for the most part that security budgets are increasing. A PricewaterhouseCoopers Global Information Security Survey published late in 2013 found a 51% increase in the size of security budgets over the previous year among the 9,600 executives it surveyed. The average budget was $4.3 million – almost double the average reported in the same survey for 2010. Continue reading “Making the Case for the Security Budget Requires Creativity and Clear Communication”