SMEs have attracted security risks due to the continued use of technology. Technology has brought significant benefits to SMEs and at the same time expose them to cyber security threats . Many of the SMEs are attracts interest from cyber criminals because of weak security and inadequate protection. Cyber attack can be costly for SMEs that are not ready to protect their systems, thus risking significant disruption, loss and even forfeiture of business. Many of the SMEs do not have a strategy to improve their cyber security posture despite the known risk to their business. Cybercrime prevention is often neglected within the SME environment because of inadequate funds which makes it expensive for SMEs to adopt complex or International cyber security frameworks. The existing frameworks are generally expensive, broad, require certifications and expert with vast knowledge which makes it difficult for SMEs to implement. This study seek to investigate the need for a cyber security framework for SMEs in Nigeria. The findings from the survey recognize the high response as 76.9% of SMEs attested to the fact that there is need for a cyber security framework for SMEs in Nigeria. The survey also revealed that SMEs are vulnerable to cyber threats because not all SMEs have considered security implication to their businesses and simply because some of them have very little knowledge of IT to understand the impact of security. An Empirical Survey using quantitative descriptive analysis was used to analyze the data collected and the tool used for data collection was a structured questionnaire and Statistical Package for Social Science (SPSS) to code the data for analysis.