A flat cybersecurity budget doesn’t have to mean weaker coverage

Cheri Hotman, Managing Partner of Hotman Group, works as a vCISO and vGRC leader.

In this Help Net Security video, she talks about holding coverage steady when the CFO asks for a flat budget or a 12% cut.

Her advice is to stop trimming every line by the same percentage.

Hotman says waste is common, with companies running three or four GRC tools that each do part of the job.

Security leaders who speak in risk and dollars, back their estimates with due diligence, and tie spending to revenue get a different conversation with finance.