Small and mid-size businesses (SMBs) are major contributors to business innovation, value, and growth-many expect them to take the lead in global economic recovery. So a 2009 survey showing widespread and serious information security vulnerabilities in this crucial business segment is cause for genuine alarm. This paper outlines the survey’s key findings, focusing on areas where even modest investments by SMBs can generate major returns in IT security, data protection, and business confidence.