The final myth in the series says "We won’t need to provide evidence of our cybersecurity.” In this article, I reveal the truth which is that small businesses will increasingly need to provide evidence of their cybersecurity in the future.

Truth Number 9 says that the cybersecurity of others is not our concern but the truth is that our business is connected to other businesses and poor cybersecurity presents a risk to the business and all its trading partners.

The Myth says that cybersecurity is too complicated for small businesses. The truth is that the basic technology controls, people training, and governance structures are not complicated.

"We're not responsible for cybersecurity". Small business owners cite a lack of familiarity and concerns that they are not well equipped to deal with cyber risk management, as reasons to avoid responsibility.

The Myth says: "No cybersecurity incidents means we've no problems". This is a commonly held understandable view among small business owners that leads to a belief that they really don't have a problem.