"Organizations invest a large portion of their information technology budgets on security applications and services, such as antivirus software, firewalls, and encryption." . . . . .