No. Large organizations often have more formal audit and compliance requirements, but smaller organizations also benefit from clear agreements, better evidence and useful reporting.
MIAUW can actually help to make security research more understandable and transferable.
Read more at MIAUW.