Smaller businesses not protecting themselves against cybercrime