4.4.3.4

Cyber Security Risk Assessment

Financial Spending for IT and IT Security

The organization shall identify their financial spending levels for cyber security investment (as raw numbers and as a percent of total expenditures).