When it comes to splitting a cybersecurity budget, I think the smartest move is to focus on training employees first. You can have all the fancy security tools in the world, but if the company/ people don’t know how to use them, or don’t know what to look out for, it’s pointless. A lot of security breaches actually happen because someone made a mistake, like clicking on a bad link or using a weak password. That’s why investing in training helps stop problems before they even happen. #MinorityReport Plus if employees are trained well, they’ll make better use of the technology the company already has. AFRAN014 says, “When the organization is learning new technology, someone who is experienced with it is going to be needed to train the staff to use it properly” To me that shows how tech and training have to go hand in hand.

            Adding on to that, you can’t forget about the tech side of it either. There needs to be a good balance. Cymulate says, “Technology investments are the keystone of every cybersecurity strategy, providing the tools needed to detect, block, respond to and monitor cyber threats.” So yes, I believe that training is important, but you still need firewalls, antivirus programs and other tools to actually stop the threats. It’s kind of like having a security system for your house. Training is knowing how to lock the doors, but the tech is the ADT alarm that goes off if someone breaks in. 

            If I were in charge, I would have to look at what’s most needed in the company. Like, are people making a lot of mistakes, or is the company missing basic protection tools? I think Cymulate explained it best, “By carefully evaluating these factors and aligning your cybersecurity budget with your company’s unique needs, you’ll be better positioned to protect your organization against evolving cyber threats.” So I’d start with training first, then add tech tools based on what’s weak. 

Works Cited

Cymulate. “Cybersecurity Budget Optimization: A Strategic Approach.” Cymulate, 16 Oct. 2023, https://cymulate.com/blog/cybersecurity-budget-optimization/.

“Journal – Budget Balance: Training vs. Tech.” ODU Cybersecurity Blog, 1 Dec. 2024, https://sites.wp.odu.edu/a428franz/2024/12/01/journal-budget-balance-training-vs-tech/.