Security now five per cent of IT budget