Education and clear allocation of responsibilities were scored as most important when CISOs were shown The Government’s ’10 steps to online security for SMEs’.