SMEs can turn cybersecurity risk into opportunity