Calculate recommended security budget from IT spend or revenue, with allocation breakdown by category.