Over a third of all incidents involving intrusion into smaller organisations have systems on the network edge as the initial point of compromise.