No, a network security policy is essential to the safety and integrity of any network, irrespective of the size of the business. Without one, a business is vulnerable to attacks from both external hackers and internal employees. In fact, small businesses are at greater risk because they might not have the resources to fight off high-level attacks.