. . . "Every organization including small businesses is exposed to risks and must develop strategies to avoid and/or minimize risks and also to mitigate the effects of risks." .