“The message is very much – stop talking about cyber security and start talking about digital business risk. It is clear that the language used is vital to the uptake of the advice regarding cyber security.
“Scaring individuals to take action is not working and is actually having a negative effect. Further, the technocratic language used to describe cyber security is counterproductive, further driving individuals away.”
SMEs are three different types of businesses (micro, small and medium) with different needs and cannot be treated as one sector. The size of the business impacts on its nature, culture and style of operation, which is radically different between micro, small and medium enterprises.
All from here which is a jolly good read! Small Business Cyber Security Workshop 2013