Which of the following is true about the security staffing, budget, and needs of a medium$-$sized organization?

They have a smaller security budget $($as percent of IT budget$)$ than a large organization.

They have a larger security staff than a small organization.

They have a larger security budget $($as percent of IT budget$)$ than a small organization.

They have larger information security needs than a small organization.