The study found that while SMBs are familiar with cyber risks and have clearly defined goals for security and storage, a surprisingly high number have yet to take even the most basic steps towards protecting their businesses. The study is based on surveys of 1,425 small and medium businesses in 17 countries during the first quarter of 2009.