It was interesting to see, last year, what large percentages said the amount was about right
(Figure 20). Consider, for instance, that although 83 percent of respondents said their organizations
spent 10 percent or less on security awareness training, half of them (49.2 percent considered this
level of investment adequate.