Is your small business prepared for a mobile security threat? Probably not, according to a recent survey commissioned by AT&T and New York University’s Polytechnic Institute.

Fewer than 29% of small business owners have actually installed anti-virus software on smartphones-- even as 65% expressed concerns over information and data threats on wireless devices. The survey polled 623 small businesses nationwide with fewer than 100 full-time employees.

“There is a troubling disconnect between business owners who want to keep data safe and the necessary steps to protect it,” AT&T Chief Security Officer Ed Amoroso said in a statement.

Adding to the risk is how commonly smartphones and tablets are used for work-related activities. 90% of small business owners polled allow their employees to access work email on wireless devices, and 41% give employees the ability access business files on the same devices.

But when asked about computer and online security, most small businesses (91%) not only expressed concern about a possible threat, but also prepared themselves accordingly. 82% of survey respondents took steps toward securing company laptops from a cyber attack.

As Inc. previously reported, a lack of funds may be holding small businesses back from implementing more comprehensive security measures. But with risks extending to every device on the network, companies may want to make room in the budget.

“Small businesses need to better understand their risk profile,” Nair Memon, director of NYU Poly’s Center for Interdisciplinary Studies in Security and Privacy said in a statement. “This means treating every device that touches your network, from laptops to smartphones, as vulnerabilities and ensuring that security is built into the equation at every level.”