Every SME needs a clear cyber security risk management strategy to guide the business in managing potential threats and impact on their business.