Husband runs security for one government agency & he said most SMB solutions useless against actual targeted attacks. Focus on employee education over fancy tech. People biggest vulnerability