Most of small and medium businesses today do not pay much attention to network and information security in the daily operations in this tough financial market. This has exposed very high risk to their business today and tomorrow. The first step to improve this is to educate the IT managers and executives to make sure that the business leaders realized that the Information and Network Security are very important tools to ensure the smooth business operation and protect the business intellectual properties. Information security is a very complex concept, but implementation is very straight forward. As minimum, choose business class commercial firewalls (see the list at http://www.thegild.com/firewall). Implement some form of IPS/IDS and antivirus systems. Implement Incident Response process to remediate the potential attack so to minimize the financial and business loss.