SMEs are accused of being too naive in the face of cyberattacks. Is it true ?