Small businesses are not ignored by cybercriminals because they are “too small to matter”. In many cases, the opposite is true. Modern attacks are often automated and opportunistic. Criminals can scan large numbers of organisations for exposed services, weak passwords, unpatched systems and compromised accounts. A business does not need to be specifically selected by an attacker before it becomes a target. Small and medium-sized organisations can also be attractive because they hold valuable information and move real money, but may have fewer dedicated security resources than large enterprises. Cybercriminals Do Not Need to Know Your Business Personally One of the biggest misconceptions is...