One of the key factors that both SMEs and MNCs miss rather often is the "human" component of Internet security. Building greater awareness on Internet hygiene and teaching staff members on what and what not to click can go a great way to preventing a large number of attacks. Of course, "safety clicking" your way through the Internet is no substitute for having at least basic Internet security in place. I would strongly recommend that companies at least have a web application firewall installed to scrub incoming and outgoing traffic.
Sign up for CIO Asia eNewsletters.