My main security focus is education.  As a small company, I am finding the cost of security very high - so we have to balance the requirement for good security systems against the cost.  Its easy to say that there should be no limitations in budget to protect the company, but that simply isn't a viable option for an SME.  I think it is very important to keep educating users - as attack vectors change and phishing type attacks become more sophisticated.  Balance education (on attack types and of company policy) with good security systems that are within the company budget.   ... View more