Most business owners do not think about cyber security until something goes wrong. A staff member clicks a link that looks ordinary. An invoice is paid into a bank account that belongs to someone else. A file server locks up on a Monday morning and nobody can open a document. Attackers no longer choose targets by size. They choose by opportunity, and smaller organisations