Small businesses do not need enterprise-level budgets to take cybersecurity seriously. That is the good news.

Cybersecurity is often treated like a defense game. Stop the hack. Block the attack. Catch the phishing email. Patch the vulnerability. Those things matter, but they are only part of the picture.