Brian Spence presented at the ACA conference in February 2013 about the importance of information security for smaller firms. A copy of his presentation is available to download here : Presentation – Brian Spence