In 2011, Jon Coss was on the hunt for funding. He had an idea for a system that could leverage Google Analytics to detect and prevent fraud and abuse in government programs. But this infrastructure-as-a-service model was new back then, untested and hard to explain to venture capitalists.

In February, Attorney General Kamala Harris released a guide to help the state’s small- to mid-sized businesses protect against and respond to threats of malware, data breaches and other cyber risks. Key recommendations include:

Compared to other industries, banks operate from a unique position, in that they have to focus intently on their own security, but also make sure their clients have the knowledge and tools to protect against computer criminals. Providing that protection usually comes down to a matter of security versus convenience.

In cyberattacks against multimillion-dollar companies, computer criminals break in and steal personal information from millions of customers. Though there will be big losses and maybe a high-profile resignation, the reality is, these retail giants will live to sell another day. But the stories that won’t make the front pages involve the most frequent targets, whose survival isn’t guaranteed: small businesses.