Security budget: before vs. after a breach
Nobody funds prevention. Everybody funds the cleanup. The eternal cybersecurity budget cycle.
Posted on 1 min read
A single coin before the incident; a mountain of cash the week after. Security spend is reactive almost everywhere — the breach writes the business case that the CISO couldn't.
The lesson: prevention is cheaper than response by an order of magnitude, but it's invisible when it works. Fund the boring controls before you're funding the forensics firm.
