Creating an in-house IT team is certainly an option but it is not a cost effective way for small businesses to manage their tech, let alone focus on Information Security.