Information Technology Security assessment & Policy for the National SME Organization