The security strategy -- and therefore, budget -- for each business will be based on factors like size, legal compliance requirements, specific industries, the types of data stored, and more.  In general, a good rule of thumb is that a cybersecurity strategy should cost roughly 9%-15% of your annual IT budget.