My motivation to write these words is based on the fact that the overall spotlight of information security incidents seems to be directed towards big players, multinational corporations and so on. We all heard about the big incidents and seen their consequences reported and the effect they had on the masses — all that content easily reaches the front pages of newspapers.