20% of CISOs spend between $100,000 and $200,000 annually on compliance.

More than half of respondents admitted they lack sufficient data to accurately assess their organisation’s IT spending.

Despite the increase in budgets and the perception of adequate resources, nearly half of UK cybersecurity leaders, 47%, struggle to engage at the board level.

36% of respondents felt their privacy budget was appropriately funded.

29% of CISOs say they receive adequate budget to accomplish their goals, compared to 41% of board members who think the function has enough funds.

2% of UK organisations had not yet calculated their cybersecurity budget requirements.

Only 36% of respondents said their organisation has a dedicated AI fund.

71% of UK organisations feel their current cybersecurity budgets are adequate for ensuring cyber safety.

Half of respondents said their organisation will divert capital allocations from other budget areas to fund AI initiatives.

Despite the increase in budgets and the perception of adequate resources, nearly half of UK cybersecurity leaders, 47%, struggle to engage at the board level.

A significant minority of UK organisations, 20%, expect increases of over 50% in their cybersecurity budgets.

80% of executives agree they face pressure to reduce the cost of security.

8% of UK organisations report that they do not have enough funding to cover their cybersecurity needs.

50% of boards with a CISO member report excellent or very good relationships when budgeting adequately to meet goals, compared to 24% for boards without a CISO member.

18% of CISOs revealed they were unable to support a business initiative because of budget cuts in the last 12 months.

77% of UK CISOs feel that their IT budget is not completely reflected by their board’s objectives to meet regulatory requirements.

78% of UK senior security decision makers reallocated budget from other business areas to meet DORA compliance requirements.

46.2% of organisations said they don’t have a sufficient budget to invest in GRC tools.

43% of respondents believed their privacy budget was underfunded.

Most organisations (57.9%) spend at least some of their budget on GRC tools to collect and maintain compliance evidence.