James Lyne, global head of security research at Sophos, said bosses should not believe they are too small to be targeted by online criminals – he believed the opposite was true.