What Should SMB Do about cyberattacks?