Small business and their (lack of) security

The Register has somewhat of an eye opening article talking about the fact in the face of worms like MSBlast, most small based business still couldn't care about security.

This is one of the fundamental issues I speak about routinely. As a member of the information security field, I try to be an ambassador of security and educate people about why this is not the right attitude. But its difficult when small business feel it will "never happen to them".

Only after they get nailed do they realize thats the wrong thinking. *sigh*