IT security can be a thankless job. It is difficult, requires constant vigilance, and when done correctly, it is almost invisible.  People generally only think about IT security after there has been a failure, like a hack, a breach, or a data leak. Unfortunately, by this point, it is already too late.
Many small business leaders understand that IT security is important in theory, but feel that their company is so small that they will never be targeted.This is a mistake. Even if the majority of data breaches in the news involve massive corporations, studies have found that most of the victims of data breaches are small businesses.