Cybersecurity budgeting:
Stagnating organisational
cybersecurity budgets
Over the past two years, budgets allocated to the cybersecurity of individual
organisations have stagnated. Of the
surveyed organisations, 47 % reported
budget increases, representing a 3 %
year-on-year growth. However, taking
into account the high inflation over
the past two years, budget increases
are probably in comparison to nominal
amounts. These increases therefore likely
(55–70 %) match inflationary pressures
and price hikes, with more than half of
respondents reporting no real budget
increases.
Do you consider the budget dedicated to the
cybersecurity of your organisation sufficient?
Yes
No
2021
45 %
55 %
42 %
2022
58 %
The proportion of organisations that
consider their cybersecurity budget
sufficient has remained nearly unchanged year-on-year (Fig. 8). Over half of
respondents still regard their cybersecurity spending as insufficient.
47 %
2023
53 %
0%
10 %
20 %
30 %
40 %
50 %
60 %
70 %
80 %
90 %
100 %
Figure 8
Three quarters of organisations dedicate
0–5 % of their budget to cybersecurity
(Fig. 9), comparable to last year’s results
for the portion of total budget dedicated
to cybersecurity.
Proportion of total budget allocated to
cybersecurity by organisations in 2021–2023
2021
2022
2023
85 %
0-5 %
76 %
74 %
6%
5-10 %
Looking ahead, 55 % of
respondents indicate
plans to increase cybersecurity budgets, suggesting that the trend
of stagnation may turn
into slight budgetary
increases depending on
economic conditions.
1%
5%
10-15 %
1%
1%
1%
More than 15 %
1%
1%
1%
7%
Do not know
21 %
18 %
0%
10 %
20 %
30 %
40 %
50 %
60 %
70 %
80 %
90 %
100 %
Figure 9
17