IT managers trying to figure out how much money to budget for information security purposes each year might want to take note of some recent advice from Gartner Inc.: According to the Stamford, Conn.-based analyst firm, despite the growth in targeted attacks and the continuing discovery of new vulnerabilities, almost 90 percent of the threats companies face today can be handled without any extra investment in security. Instead, companies need to reduce some of the money they’ve spent over the past few years protecting against mass attacks — redirecting those freed-up resources to confront more narrowly directed emerging threats.