Security leaders use comparisons with their peers to assist with their security budgeting. In this report, Forrester compares the budgets of global security decision-makers at firms spending up to 10%, 11% to 20%, and 21% to 30% of their IT budget on information security. Security leaders can use these budget ranges as a starting point to evaluate their own programs and areas where they plan to develop competence, then compare their product, service, staffing, and other allocations with those of similar firms. This report provides three baseline ranges to guide chief information security officers’ (CISOs) future information security budget decisions.