Building a Defensible Security Budget: Part I
A defensible security budget is a set of allocated costs that serve the strategic objectives of the organization based on a choice of controls that maximize capital efficiency in an uncertain world. Allocated costs support actions intended (but not guaranteed) to carry us to a goal. Strategic objectives relate to why an organization exists at all, and capital efficiency relates to the wise and productive use of cash in a risky world.