SMBs need to prioritise cybersecurity preparedness, says study