Data security now accounts for 10 percent of IT operating budgets