Abstract
Cyber security is a core issue of the world. Every country and each organization is trying their best to defend their assets by spending a huge amount of their budget on Cybersecurity issues. It has been noticed that cyber security funds have not be utilized in a proper way to defend the assets of an organization. Each organization has their special needs and sensitivity to their assets. Some assets are critical to be protected in an organization while a few assets are trivial to be protected as organizational backup plan works. In this connection, we have proposed three basic models for Small and Medium Enterprise (SMEs) and one holistic model to cover the needs in the life cycle of diverse SMEs. These models are based on the sensitivity of assets and organizational requirements. These model can be further assessed when extensive survey/interviews based on the target organization taken placed.