| In recent years, small and medium-sized enterprises(SME) have lots of informationsecurity problems, such as hacking, virus invasion, abnormal information disclosure,data loss, etc, which bring great challenge to their information system construction. Onthe other hand currently the information laws and regulation is not perfect and SME arelack of capital, human resource,know-how, etc. These barrel make the SME`sinformation system construction more difficult.Firstly my paper will focus on the reasonwhy the information security of SME is not good through the surveys of SuzhouWeitang`s SME. The results are mostly related to information security awareness, lackof capital,lack of technical support,etc. Secondly I try to find some solutions or givesome suggestions, which may help SME on information security construction. |