Fewer than half of small and medium-sized business owners rate cybersecurity as an important priority, but the risk of cyberattack