That’s one of the findings in the 2006 Computer Security Institute\/FBI annual security survey, which is scheduled for release on July 12. According to the new data, companies with revenues of less than $10 million annually invest approximately $746 per employee per year on security, while companies that make $1 billion or more spend just $58 per employee.<\/p>\n","protected":false},"excerpt":{"rendered":"
Training, in particular, shows the greatest economies of scale: It costs companies of $1 billion or more just $18 per year to train their employees in IT security; that same training costs $318 per year in companies of under $10 million. The data might be something of a vindication for smaller companies, which have come under fire recently for moving too slowly in the deployment of security tools and standards such as the Payment Card Industry’s Data Security Standard.<\/p>\n
Some 47 percent of respondents now are allocating less than 3 percent of their total IT budget to security, which compares to 35 percent in last year’s survey, according to the study. By contrast, 34 percent are now allocating more than 5 percent of their budgets to security –up from 27 percent last year.<\/p>\n
http:\/\/www.darkreading.com\/document.asp?doc_id=97818&WT.svl=news1_1<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[],"class_list":["post-1877","post","type-post","status-publish","format-standard","hentry","category-statistics"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1877","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=1877"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1877\/revisions"}],"predecessor-version":[{"id":4364,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1877\/revisions\/4364"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=1877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=1877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=1877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}