Statistics for Information technology security policy framework for small and medium size enterprises in Nairobi