Most small businesses are not sufficiently optimised for the avoidance of cyberattacks.