Why Every SMB Needs a Risk Assessment Small and medium businesses are increasingly the target of cyber attacks. According to recent industry reports, 43% of cyber attacks target small businesses, yet only 14% are adequately prepared. A cybersecurity risk assessment is the foundation of any effective security program — it tells you where you’re vulnerable and what to prioritize.