Your Cybersecurity Budget Is a Horse's Rear End

This commentary critiques the entrenched, incremental nature of cybersecurity budgeting—likened to legacy constraints epitomized by the “horse’s ass” anecdote—and argues that many programs are limited by historical baselines rather than current risk realities; it urges CISOs to reassess from first principles and leverage business process reengineering, cyber-risk quantification, and optimization to break out of these constraints.