The aim of the publication is to brief on a safe and cost-effective security solution cost and time estimation tool for small to medium size enterprises since most of these either do not have a budget for cyber security or are miniscule in general. Evaluation tool will be used to determine approximate time and costs a small company might face implementing a comprehensive security solution. Analyzing ISO/IEC 27002:2013 standards, additional security guidelines and several recommendations was necessary to creates the IT security implementation evaluation tool. The resulting product is a tool that allows any member of an enterprise to carry out a small test to determine the necessary resources and time for security implementation.