eMediaUSA did a neat survey for GFI on the security posture of small businesses. They found that awareness was their weakest link concerning security.

I know users hate it when security folks point their fingers at them and tell them that people are the weakest link. But it is the truth. The more I am in this business, the more I find if people were just simply a little more aware and asked questions when they think something is not right a lot could be done in protecting a company. But like I have said before, on the flip side, when those users ask a security pro a question the security pro has to make sure they do not make the user feel stupid no matter the question, or they will stop asking. The breakdown of communication happens between the front line users and the security folks and to me it is the weakest link. For the full survey in PDF click here.