Organizations that have attained a high level of information security can bring down such spending by 2008. Conversely organizations, which have not been able to reach a certain level of security or have not invested enough, may have to spend a greater part of their budget on security during the next few years. In 2006, [...]