The managers do not care about their spending.
In addition, several of the security managers expressed interest in improving their ability to more precisely measure the costs and benefits of security-related activities so that their organizations could better determine which controls and activities were the most cost effective.