Smaller enterprises, companies with about 500 or fewer employees, have little of the luxuries that their larger counterparts boast. Although short on staff, resources and funding, they face the same types of information security threats as do mid-sized and large companies.