Plain-English cybersecurity for small and mid-sized businesses: what's changed, what it costs, and what to do next.