A report released by The Computing Technology Industry Association (CompTIA) notes that organizations are using an average of 20% of their total IT budgets on security-related spending in 2006.
A report released by the Computing Technology Industry Association (CompTIA) notes that organizations used an average of 20 percent of their total IT budgets on security-related spending in 2006.
This was based on a survey of 1,070 organizations. Spending is up from 12 percent in 2004 and 15 percent in 2005.
Organisations expect to increase spending across all areas related to security in the next 12 months, CompTIA said. Almost half of the respondents said they plan to increase spending on security-related technologies. One-third of those surveyed said they expect to increase spending on security training. Those who expect to increase spending would do so by an average increase to 23 percent.
According to CompTIA, antivirus software, firewalls, and proxy servers hold the top slots for security enforcement technologies, and nearly all organisations use them. Over the past two years, organizations have increasingly relied on a layered approach, or combinations of firewalls, proxy servers, intrusion detection systems, physical access control, and multi-factor authentication, among other methods.
It's worth noting that out of the security-related expenditures, 42 percent goes toward purchasing technology products, 17 percent goes toward security-related processes, 15 percent toward training, 12 percent for assessments, and 9 percent goes to pay for certifications.
Check out the report in CompTIA's research section.