Most news coverage is about large enterprises getting hacked, or data breaches which result in thousands of records being breached. It’s a rare occurrence for coverage to be done on a smaller organization being affected, yet it happens more frequently. Often the SMB space claims they cannot afford to pay for IT, let alone infosec. This talk examines the causes for this, what the SMB space should be doing, and how we as Information Security professionals can help.