
3: Cost Factors of a Breach
39
still the risk of losing knowledgeable personnel
cannot be underestimated.
So, what does an ISMS cost?
Let’s look at what you need first and then present
timelines and cost items. All cost items will
depend on your employees’ salaries and on the
cost of external consultants you may want to bring
in. This is advisable if you are under time pressure.
Consultants are also usually brought in for an
efficient knowledge transfer, but their time of
engagement is vastly reduced by up to 90 percent.
Table 1 summarises the most important steps
necessary to set up an ISMS and differentiates
between a certified and a ...