Security spending has grown at a compound annual growth rate of 28% from 2001 to 2003, according to figures from Gartner. IT budgets have grown at only 6% a year over the same period. It estimates that in most industries, 2003 will be the first year in which more than 5% of IT budgets has been allocated to security. However, John Pescatore, vice president and research fellow at Gartner, warns: “Security spending can’t continue to consume ever-increasing portions of the IT budget. No enterprise can afford to spend more on insurance than on new product development. By 2005, security groups that can’t demonstrate security effectiveness metrics will experience flat to declining IT security funding.”