With the constant rise in information technology and almost every business utilizing it in some way or form computer devices have become a daily part of business operations. Unfortunately, there are now more risks targeting these devices. As a result, many firms have updated their information security requirements to tackle these risks. Which, while offering a wonderful selection, can also make it difficult for businesses to decide which to choose. especially if it is a small business, which often has few, if any, resources to allocate. However, it is strongly advised that they do so because evidence suggests that without them, those small firms wo not be able to manage their information security systems properly and failing to do so could result in the business ceasing operations as a result of an attack. Unfortunately, putting security principles into practice can be difficult.