Small and medium-sized enterprises are also targets of cyber attacks. The first step in security measures is to take into account the IPA's "Five Information Security Principles."