Why start-ups should pay attention to online security