The State of Cybercrime survey is conducted annually by CSO in partnership with the US Secret Service and CERT at Carnegie Mellon University. The average IT security budget of the companies represented is $11 million. Despite a decline in the overall number of incidents, phishing and ransomware attacks are on the rise, as is the number of companies that experienced losses from a cyberattack. Security is getting more mindshare at the corporate level and more resources, even if in some cases the gains are incremental. Twenty percent of CSOs/CISOs report to the board of directors on a monthly basis, up from 17 percent last year.”]