You can actually set security at the report level as well, although, I'd recommend that you review your security requirements as a whole. A well thought out security layer and folder design is easy to use, conserves space in the Info Database, performs better and opens faster for the users.
Good luck and have fun!