Among SMBs with fewer than 50 employees, more than half allocate less than 1% of their annual budget to cybersecurity.