In recent years there has been considerable research to identify and solve the information security management difficulties and problems for small and medium sized enterprises (SMEs). However，recent information security surveys indicate these problems still exist. In the southwest of England，more and more SMEs' businesses are highly depending on IT/ICT，but the relevant security research is not enough. This paper focuses on identifying the security difficulties struggled by southwest SMEs and tends to give the effective information security advices to all sized SMEs.