For Small and Medium Enterprises (SMEs) implementing information security programs, this blog has monthly entries that focus on specific areas of information security and how improvements can be made.

NOTE: Europeans prefer the term Small and Medium Enterprise (SME); Americans prefer the term Small and Medium Business (SMB). The European Union (EU) defines SMEs as having fewer than 250 employees (see EU SME definition); Americans generally define SMBs as having fewer than 500 employees.