Companies may be unaware of the internal potential for computer security incidents.

Some are very small businesses that should have that technology, but they don't.