Our CTO, Oliver Tavakoli advised that one way you can determine if you're spending enough on your security is to challenge your organization with pen testing and evaluate the results.