Building a budget involves three core components: people, process, and technology. The first step in budget development is to select or develop a framework to guide the selection of new investments. Needs are processes or technologies required to maintain or improve the organization’s security posture. Nice-to-haves are processes and technologies that would enhance existing security controls but do not necessarily provide a major benefit. In Part 1 of a two-part series, we’ll look at how to pull the numbers together.”]
Source: https://www.darkreading.com/analytics/tech-insight-how-to-build-an-it-security-budget