Asmall library's essential technical problem is that it has to chart a course through the technology shoals without a navigator on board. Small libraries in small towns often have a very low level of technical skill on staff. Furthermore, obtaining skilled technical support can frequently be pretty expensive. Even when one is available, a clever systems and network support person can underestimate the needs of the library environment or simply not be familiar with some of the specialized tools designed for our environment. The problem is compounded by the fact that libraries invite anyone who walks in the door to sit down at the public PCs and do as they like. This article lists standard tasks that will provide pretty good security at minimal cost. The underlying theme is to develop "defense in depth." To do this is to do little things throughout the network rather than to set up a single point of protection that is expected to be fail-safe. Developing defense in depth is one of four fundamental principles of developing a secure environment. The other three fundamentals are: know your network; apply the principle of least privilege; and detection is more important than protection.