The FDIC requires that within a financial institution’s budget there must be a specific allocation for cybersecurity elements.