6 steps for protecting small businesses from cyberattacks