Introducing Security to the Small Business Enterprise

A recent survey by American Express found that 71% of Small Business Enterprises (fewer than 100 employees) are now using the Internet for a wide variety of tasks [1]. SBE's are now implementing Internet enabling strategies for globalisation and to compete with larger competitors. They connect to the Internet via dedicated broadband services and enable clients to interact with business systems and use it for a variety or purchasing, marketing and administration functions. However, many SBE Internet strategies overlook both Internet and internal security principles such as Defense in Depth, and SBE management often has very little understanding of the threats, risks and implications for the business. This discussion paper outlines the issues and constraints that a SBE faces, the common misconceptions managers have regarding Internet security, and how to introduce security to the Small Business Enterprise.