Will a recession impact security spending?

We are, or so the press keep telling us, gearing up for an economic slowdown, if not full blown recession. In this climate, many information security teams will be assessing the impact of a cut in the security budgets, particularly with pressure to ensure responsible, secure business practice coming from consumers, B2B customers, partners and regulation to contend with. There is no doubt that high profile breaches have made issues such as data loss, and identity theft a mainstream concern.

Talking to my colleagues and looking at the results of our own research into the concerns of the industry makes me believe that companies will continue to take action, rather than cutting back on their investments in securing their organisations’ information.

I don’t believe any company would, in this climate, risk their corporate reputation with lapse security controls. Security is perhaps, one of the safest of operational budgets from the knife. Though it’s worth noting, the security budget will not likely ever be immune from having to be justified. And as good business managers, we should always be looking for areas where we can help tighten the corporate belt. There are likely to be areas in any budget, including ours, where projects can be deferred or possibly dropped. Learning the skill of getting more for less will go a long way in this climate. After all, budget alone is not the answer to a company’s security woes.


John Colley
Managing Director EMEA, (ISC)2