At a #CyberSecurity forum recently, the "golden rule" was cited as 10% of the total I.T. budget. For a Canadian NFP handling sensitive donor data and facing a 50% rise in phishing attempts this year, that feels dangerously low.
Is anyone actually seeing 10% work in the field?




