CISOs are generally present only at the larger end of the spectrum or in regulated industries such as finance and insurance. The CIO may also function as CISO. The average annual IT budget is approaching $667,000, with significant variations based on size and industry. More security-conscious businesses spend two to three times as much as others. Concerns about IT security, storage, disaster recovery and integrated products that provide more functionality are key to CISO’s success. Concerned businesses may lack adequate backup systems, which are difficult to scale down.”]
Source: https://www.csoonline.com/article/2119654/data-points.html