How can we implement information system security with a minimum cost?

What would be the best way to mitigate the risk?

How can we implement the network security by spending a minimum effort and time?