Middle East businesses are spending less than 1 per cent of their overall IT budgets on security, leaving them vulnerable to cyber attacks.