No small business is too small for information security Owning and operating a small business  (generally considered to be a business with fewer than 500 employees) isn’t easy.  Infrastructure isn’t automatic, the sales funnel constantly needs filling, cashflow can be a problem – it’s easy to get caught up in the immediate, day-to-day challenges