In more than half (52 percent) of organizations, either the CIO or CEO has the most influence on security spending. In only 18 percent of organizations, the chief information security officer (CISO) controls the security budget, while the CFO is the main influencer in 12 percent of organizations.