The cost of information security management in offshore SMB ICT companies

Companies belonging to offshore SMB ICT segment are subjected to various costs arising from several sources like legal compliance, alignment with best practice guidelines and standards, employee education, basic computer and network infrastructure security and cost of SaaS/cloud solutions. Furthermore, such companies usually have very limited financial resources, yet they are often involved in large projects working for major offshore installation contractors. In this paper the authors will outline basic costs of information security management systems in offshore SMB companies and propose a simple model to continuously monitor and control them.