Small and medium sized businesses fail to take adequate steps to reduce Web-based security threats. 81 percent of SMB IT managers do not use software to block the use of peer-to-peer applications. Only 4 percent of employees have daily security updates on their work PC, while 11 percent say the security software on their PC has never been updated. The study also found that business-owned computers are left vulnerable to security threats for more than 21 days, on average, despite the daily updates promoted by anti-virus vendors.”]
Source: https://www.darkreading.com/attacks-breaches/study-smbs-overconfident-in-it-security