The risk that growth in the information security market and the IT industry as a whole will slow as investment in information security measures runs its course and matures. This also includes cases in which the risk of stagnant investment is mitigated by increased budgets at mid-sized companies and expanded demand for post-incident response.