SMB employees may be the cause of cyber compromises