Is SME's Actually Doing Anything To Prevent Attacks?