Small businesses are also a target of ISO 27001. It is misleading to think that information security is a concern of large companies.
Whether you decide to implement the standard in order to benefit from the best practices it contains, or you choose to get your company certified to gain more trust in the market, ISO 27001 will help your company to manage and protect information, by helping you to identify the inherent risks and to put in place the appropriate controls to help you to reduce those risks. Risks are not only in large companies, are in all companies.
Apply the four steps method of ISO 27001 implementation, proposed on training, and implement ISO 27001 in your company. Do not complicate what is simple! Discover all ISO 27001 courses.