Corporate security spending not in line with real-world requirements