Whether your financial year begins in January or April, budget conversations are starting now. For many organisations, security is a line that gets rolled forward: the same guard contract, the same monitoring fee, the same maintenance allowance, adjusted for cost increases. It rarely gets the scrutiny other spending does — until an incident forces it.
This year there are good reasons to look harder. A year after Hurricane Melissa, many organisations are still paying for repairs and absorbing higher insurance costs. National crime figures are falling, which some will read as a reason to cut. And data protection obligations are becoming more concrete ahead of full enforcement in 2028.
Start from risk, not from last year
A defensible security budget starts with a short list of the risks that matter most to your organisation, ranked by likelihood and impact. Every significant line in the budget should map to one of them. Spending that does not reduce a known risk is a candidate for cutting. A known risk with no spending against it is a gap.
Five things to plan for
1. People before technology. Guard services and supervision are usually the largest cost. Make sure the contract specifies what you actually need — post orders, supervision, reporting — not just hours.
2. Maintenance of what you already own. Cameras, alarms and access control systems that are not maintained quietly stop working. Budget for servicing, battery and storage replacement, and a periodic test.
3. Resilience. Backup power for critical security systems, and a plan for protecting sites during outages, belong in the security budget, not just the facilities budget.
4. Compliance. DPA registration, a Data Protection Officer where required, and the time to review screening and CCTV retention.
5. A small reserve. Incidents bring unplanned costs: emergency repairs, extra cover, investigation. A modest contingency avoids raiding other budgets mid-year.
Where savings are realistic
Savings usually come from duplication and drift: overlapping contracts across sites, monitoring for systems no longer in use, or guard posts that remain after the risk they addressed has gone. A review often finds money that can be redirected rather than simply cut.
What this means in practice
- List your top ten security risks before opening the spreadsheet.
- Map each budget line to a risk, and flag lines that map to none.
- Check contracts and maintenance agreements for renewal dates in the coming year.
- Include resilience and compliance costs explicitly.
- Present the budget to leadership as risk reduced, not just money spent.
Talk to us about a risk-based security budget review. → Bespoke security management
