Security spending stays strong

Enterprise IT security spending took a larger share of the total IT budget in 2008

Security spending is remaining constant even in the face of shrinking IT budgets, according to analysts.

Two reports from Forrester Research suggest that enterprise IT security spending took a larger share of the total IT budget in 2008, and that this trend is likely to continue as security becomes ever more important.

Security spending dropped only slightly at small and medium-sized businesses in 2008 and looks to climb again in 2009, the report found.

"Even during challenging economic conditions, IT security remains an integral part of business operations as firms look to maintain their current environment as well as plan for the implementation of new initiatives," wrote Forrester business data services analyst Jonathan Penn.

The two studies found similar sets of security concerns and challenges for large and small businesses alike.

Both groups cited the growing importance of data security, while the need for specialised skill sets and more attention on the budget have led to growth in managed security services.

Other areas, however, show some differences between the two demographics. IT employees at large enterprises are increasingly reporting directly to chief executives or company presidents on security matters.

Meanwhile, at small and medium-sized businesses, IT workers cite the lack of solid security systems and difficulties in convincing executives to authorise the purchase and implementation of more sophisticated security systems.