Research Finds Companies Stuck Putting Out Security Fires

Smaller businesses in particular are spending a larger percentage of their budgets on security than enterprises as they play a game of IT whack-a-mole. 

According to research from Gartner, for the past few years SMBs have consistently spent from 5 to 10 percent of their IT budgets on security, as compared with the 3 to 6 percent spent by enterprises. However, even though they have spent a larger portion of their budget, the typical SMB is not addressing security in a truly holistic way, analysts said.

"SMBs have not historically invested in establishing a solid security infrastructure foundation, so they must continue to upgrade that foundation to satisfy compliance and business pressures, while reacting at the same time to changes in the threat environment," said Gartner analyst Adam Hils.

Though it would seem that by necessity an organization with a smaller budget would have to be better at risk management, most SMBs find themselves reacting to crises at the expense of strategic investment, he said.

Read the full story on eWEEK's Midmarket site.