SMEs do not have the same regulatory pressures that can lead larger companies to measure and mitigate their risks, but they also have fewer buffer resources to resist unexpected shocks. They are one large potential incident away from bankruptcy. That’s why SMEs can benefit from taking three actions: designing controls proportionate to the risks at stake, analyzing the lessons from success (not only from failures), and using risk management to boost and protect business performance.