Many security case studies focus on large businesses, or on small businesses for limited values of "small." The US Federal Government defines a small business as having fewer than 100 employees and, depending on industry, an annual income of less than a number ranging from $0.75 Million to $28.5 Million. Many businesses, however, are far smaller than that, but could still benefit from security awareness.