The risk landscape is constantly changing. While email-borne threats continue to be a problem, other risks are now replacing spam and viruses as the main thorn-in-the-side of small businesses.
What's keeping you awake at night? What's your main security concern/priority in 2008? Is it insider attacks? The portable problem (iPods, laptops, flash drives, etc.)? Web 2.0 risks? Or something else?