Spend wisely Course

In this course, you’ll explore how to make the best use of your security budget and balance costs of time, effort and money.

46 minutes

Course description

No one has an unlimited budget, and it can be difficult to determine how much time, effort and money to spend on security. This course examines the relationship between risk and cost and then helps determine the right balance of spending versus outcomes, providing a framework to think about your security budget.


Big ideas

Video - 00:03:00

A summary of the key points of this course.
Three methods to set your security budget

Video - 00:15:00

Using headcount, revenue and/or development budget to benchmark your security budget.
Risk, effort, cost

Video - 00:12:00

Risk drives effort and effort drives cost! Not the other way around.
The Goldilocks Principle

Video - 00:14:00

Like the story of Goldilocks, you want to invest the amount of effort (and money) that is "just right"; not too much, nor too little.
Spend wisely overview

Video - 00:02:00

A brief introduction to the ideas that this course section will cover.

Meet the author

Ted Harrington

Ted Harrington is the #1 bestselling author of "Hackable", which led to his TED talk “Why You Need To Think Like a Hacker.” He’s the Executive Partner at ISE, the company of ethical hackers famous for hacking cars, medical devices, and web apps; he also co-founded START, software which simplifies vendor risk management. His clients include Google, Amazon, and Netflix, and he has been featured in more than 100 media outlets, including The Wall Street Journal, Financial Times, and Forbes. His team founded IoT Village, an event series whose hacking contest is a four-time DEF CON Black Badge winner, and he hosts the Tech Done Different podcast.

Unlock 7 days of free training

  • 1,400+ hands-on courses and labs
  • Certification practice exams
  • Skill assessments

Plans & pricing

Infosec Skills Personal

$299 / year

  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Learn about scholarships and financing with

Affirm logo

Award-winning training you can trust