A flat cybersecurity budget doesn’t have to mean weaker coverage
vCISO Cheri Hotman advises sorting security spend into four buckets to hold coverage steady under flat or cut budgets.
Cheri Hotman, Managing Partner of Hotman Group, shares advice for security leaders facing flat budgets or 12% cuts in a Help Net Security video. She recommends categorizing each expense as effective protection, unoperationalized value, duplicate tooling, or compliance theater instead of trimming every line equally. She notes waste such as companies running three or four GRC tools, and says framing spending in risk and revenue terms improves finance conversations.
- Sort security expenses into four buckets rather than cutting every line equally
- Companies commonly waste money running three or four overlapping GRC tools
- Cheap choices often cost more later, per Hotman
- Speak in risk and dollars, backed by due diligence, to win finance support
- Vendors
- Help Net Security
- Organizations
- Hotman Group
From the original article
1 min read at helpnetsecurity.com
Cheri Hotman, Managing Partner of Hotman Group, works as a vCISO and vGRC leader. In this Help Net Security video, she talks about holding coverage steady when the CFO asks for a flat budget or a 12% cut. Her advice is to stop trimming every line by the same percentage.
helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.