Just a thought but smaller companies have a smaller window (often cant play as much or have everyone around for a full 9 hours a day) and larger companies have to devote more resources to potentially a much larger window of getting attacked.
Balance the mega-companies out a little.