SMBs must take proactive steps to protect themselves, because the cost of inaction may be too great to recover from.