The SANS 20 Critical Security Controls is an excellent method for defining a strong security methodology. The controls are applicable to both the enterprise and the small business, and significantly improve the security posture of the implementing organization.