The cost of IT security depends on the organization’s size and its IT infrastructure’s complexity. For example, a small business may only need to spend a few thousand dollars on IT security, while a large corporation may need to spend millions.