"Security is not one-size-fits-all, so it depends on the type of organization and what their risk tolerance level is," said Michelle Drolet, CEO at Towerwall Inc., a data security services provider based in Framingham, Mass. "There are a lot of questions that need to be answered before you can make that decision."