An informal survey of the stories on information security budgeting suggests that 40-60% of organizations are cutting or holding their budget the same over the last year. And of those that are increasing their budgets, most increases are small. This is at a time when the actual threats are on the rise, security has risen in importance to the organization, vendors are daily coming out with solutions to problems we did not know we had a year ago, and hiring and keeping good people is becoming increasingly difficult and expensive.