Anyone know how small enterprises (non-tech) are fulfiling their InfoSec work? Small non tech companies often cannot hire someone full time or for contract as they have a limited Security work which needs to be completed. I'm guessing they hire consultants - does anyone know how to find consultants? (Folks in tech companies will probably figure out how to do Security even if they don't have an expert in the team)