Cybersecurity budgeting: Stagnating organisational cybersecurity budgets Over the past two years, budgets allocated to the cybersecurity of individual organisations have stagnated. Of the surveyed organisations, 47 % reported budget increases, representing a 3 % year-on-year growth. However, taking into account the high inflation over the past two years, budget increases are probably in comparison to nominal amounts. These increases therefore likely (55–70 %) match inflationary pressures and price hikes, with more than half of respondents reporting no real budget increases. Do you consider the budget dedicated to the cybersecurity of your organisation sufficient? Yes No 2021 45 % 55 % 42 % 2022 58 % The proportion of organisations that consider their cybersecurity budget sufficient has remained nearly unchanged year-on-year (Fig. 8). Over half of respondents still regard their cybersecurity spending as insufficient. 47 % 2023 53 % 0% 10 % 20 % 30 % 40 % 50 % 60 % 70 % 80 % 90 % 100 % Figure 8 Three quarters of organisations dedicate 0–5 % of their budget to cybersecurity (Fig. 9), comparable to last year’s results for the portion of total budget dedicated to cybersecurity. Proportion of total budget allocated to cybersecurity by organisations in 2021–2023 2021 2022 2023 85 % 0-5 % 76 % 74 % 6% 5-10 % Looking ahead, 55 % of respondents indicate plans to increase cybersecurity budgets, suggesting that the trend of stagnation may turn into slight budgetary increases depending on economic conditions. 1% 5% 10-15 % 1% 1% 1% More than 15 % 1% 1% 1% 7% Do not know 21 % 18 % 0% 10 % 20 % 30 % 40 % 50 % 60 % 70 % 80 % 90 % 100 % Figure 9 17

Select target paragraph3