Does the SME take security seriously?