Finally, an independent third party needs to conduct a documented annual audit. This audit validates current procedures and policies and provides a general indication to the relative health of the systems and network, and provides the checks and balance to the entire system. This defense in depth model provides multiple levels of system and security hardening. Additionally, as companies depend more and more on the Internet as a communication resource, B2B and B2C process, and streamline department functionality, system security becomes critical. Microsoft has proven numerous times, size does not matter, if a dedicated hacker wants to cause your business harm, it will.
Soft targets are easy targets.