Small and medium businesses need to examine the maturity of each layer of defense, and then reinforce these controls to defend their company.