Michelle Smith
C. Kirkpatrick
Cybersecurity
27 October 2025

Balancing the Tradeoff of Training and Additional Technology

I believe that cybersecurity training should be prioritized over additional technology. Although having the necessary technology is important, knowing how to defend against attacks is more beneficial to both the workplace and the individual.
Training Budget
If I were the Chief Information Security Officer, at least half of the budget would be dedicated to training the employees, specifically, 50% to 65%. The remaining 35% to 50% of the budget would be spent on additional technology. If the majority of the budget was spent on equipment and not the training, that would leave tools in the hands of people who do not know how to use them effectively. In addition, workplace deviance is less likely to occur when proper training is available and provided to employees. Essentially, having a deep understanding of threat assessment and defense is more valuable than relying solely on advanced technology.
Why Not Additional Technology?
As stated previously, 35% to 50% of the budget would be dedicated to additional technology. Having up to date system and tools is crucial to workplace security, but if the employees do not know how to use them, then the investment becomes ineffective. Inadequate training eventually leads to the misuse of expensive technology, which can be considered a form of workplace deviance. Spending less on technological defenses and more on training may also benefit a company financially in the future; if there are fewer attacks in a workplace, then less money would need to be spent during the recovery stage.
Conclusion
While additional technology is important, most of the budget should be spent on awareness training because it benefits everyone, not just the company. Educating employees ensures a safer, more adaptable, and better prepared future for the organization and its workforce.