The questionnaire is devoted to different aspects of making up and distributing Information Security (IS) budget also for ensuring a proper level of data protection. The goal of the research is to find correlation between specific IS budget characteristics and IS and data protection risks that organizations are subject to.