The majority of small to medium enterprises are failing to protect their corporate networks.