A business must protect the information from loss, theft, and damage; non-compliance can result in fines and penalties. While larger companies have the resources to deal with cybersecurity concerns, small businesses often do not. Typically, a business owner or their immediate family members perform many roles within the small business. Due to a lack of information technology skills and the resources to hire those skills, many small businesses are at great risk of having their systems compromised.