Small-to-medium-sized businesses (SMBs) are the backbone of many national economies, yet they remain highly vulnerable to cyber-attacks. From financial constraints to a lack of expertise, these businesses face unique hurdles in implementing adequate cybersecurity measures. Despite their economic importance, the cybersecurity of SMBs often remains an underexplored area in academic