Study: Most compliant companies and agencies spend, on average, $3.5 million annually on security. Non-compliant companies spend an estimated $9.4 million on security, Ponemon Institute study finds. The study interviewed 160 IT practitioners at companies and organizations that crossed numerous industries. The most-often focused on standard, across the board, is the Payment Card Industry Data Security Standard, the study found. Financial, retail, healthcare and government were the least secure, the research found.”]
Source: https://www.govinfosecurity.com/ffiec-compliance-could-save-you-money-a-3312