Protecting SMBs from Cyber Risks Using the NIST Framework