Despite the increase of cyber attacks on small to medium sized companies, spend on security does not seems to be a priority.