Where Should Security Budget Be Spent?