Resumen
This paper investigates the possible existence of overconfidence by small business professionals in their knowledge of different types of computer security threats. Specifically, this article focuses on the ability of small business owners and managers to understand and identify four main types: viruses, Trojans, spyware, and phishing attacks. Contrary to our expectations, subjects did not exhibit overconfidence in their knowledge of computer security threats. Implications for education and practice are discussed.