A survey from Nationwide identified weaknesses in small business cybersecurity posture, including a lack of employee cyber awareness and training.
https://www.securitymagazine.com/articles/98426-are-small-businesses-prepared-to-defend-against-cyberattacks