Cybersecurity is no longer just an IT issue, it’s a business risk, a trust signal, and increasingly a commercial requirement for New Zealand organisations. Small and medium‑sized businesses (SMBs) are now one of the most targeted groups for cybercrime, yet many still struggle to know where to start or what “good” looks like.