If your business is relatively small, keeps a low profile, and isn’t involved in financial services or national defense, you might assume that data security isn’t a big issue for you. Why would someone in the presumably limited pool of hackers take the time to target your company? How would they even know about it? And if by some strange chance a hacker did get in, so what? You might assume you could hire someone to clean up your systems. All of your employees would have to change their passwords, which would be annoying, but pretty soon it’d be back to business.
SOURCE: blogs.hbr.org
