I think the issue is not necessarily whether one jurisdiction's way of approaching security is better than another's. Bill C-12, which is on the horizon and I hope will be passed, is certainly going to require businesses to turn their minds to security and security issues. But particularly with respect to small and medium size businesses, that's going to be a problem, I think.
I guess I would follow up with what several people here have said, including Mr. Bergeron, for example, that smaller firms need help in investing in ICT. Part of that would be security. First of all, there has to be an awareness and, secondly, they have to have the infrastructure in place. And that means dollars.
All of the studies I've seen seem to indicate that small and medium size businesses, at least at this stage, are not turning their minds adequately to the security issue. That's going to be to their detriment. Frankly, Canada is a little bit behind the ball here. We do have Bill C-12 on the horizon. Other jurisdictions have passed legislation that, for example, requires businesses to have certain security measures in place and, if they don't, to report security breaches. That is something, I think, that is going to come.
It begs the question, though, what small and medium size businesses can do about that. First of all is the awareness issue, and second of all is the financing to put things in place so that they are able to meet the requirements of the legislation.