...recession hit times. Most of it is pretty uninspiring. A blog from Jeff Bardin links off to a plethora of open source and freetools. A nice idea if you're starting up and have people with the technical knowledge to make the most of some of the listed...
http://www.computerweekly.com/blogs/stuart_king/2008/12/security-budgeting.html
...their MSDN and Patterns & Practices guidance. There are also plenty of other good online resources such as OWASP and the freetools offered by Foundstone. However, websites still get hacked with regularity so what more can we do other than keep...
http://www.computerweekly.com/blogs/stuart_king/2008/01/a-few-days-ago-an.html