SMBs need to not only reduce their odds of being hit by an attack, but also implement processes that they can follow if their defenses are breached