Cybersecurity ROI Climbs as Budgets Shrink: Report

Cybersecurity budgets have declined significantly over the past two years, despite evidence that security teams are generating measurable business value, according to a report cited by *Infosecurity Magazine*. The share of annual organizational spending allocated to cybersecurity has dropped from 1.1% to 0.6%, highlighting a growing disconnect between investment levels and cybersecurity’s contribution to enterprise-wide initiatives.

The report found that cybersecurity teams deliver $36 million in value for each major organizational project they support, underscoring their role as strategic enablers rather than just risk mitigators. However, the reduction in funding suggests that organizations may not fully recognize the broader benefits cybersecurity brings to operations, innovation, and resilience.

The findings raise questions about how enterprises prioritize and evaluate cybersecurity spending, especially as digital transformation and threat landscapes grow more complex. Despite lower investment, cybersecurity teams continue to demonstrate their potential to drive business outcomes beyond traditional security functions.