More than half of small firms (52 percent) have no IT security guidelines in place for staff, meaning employees could be putting the firm at risk by downloading or visiting potentially dangerous websites from company PCs, says AVG.
Research by the security firm revealed one in seven small businesses admitted they don't use security software, while a quarter (25 percent) have experienced a security breach.
Furthermore, 83 percent agree that having the right level of security protection is critical to their business, while more than three quarters (77 percent) agree a security threat could have a significant negative impact on their business.
With this in mind, AVG has launched a web-based Business Resource Center that offers advice, blogs, demos and tools to help them protect their business from internet and network security threats.
"As our research shows, small businesses have a fundamental understanding that Internet security threats can be a hazard to their businesses, but they obviously lack the time or the resources to adequately protect their businesses from cybercriminals who may try to steal valuable company information," said Robert Gorby, AVG's global head of SMB propositions.
"AVG's Business Resource Center is designed to educate business owners about online threats to their businesses and provide them with a myriad of resources to help protect themselves."