Here is a number that should unsettle any MSP or MSSP selling compliance-shaped security services: 83% of SMBs report having a cybersecurity strategy, and their incident rates are statistically identical to the companies that have none. The documents exist. The policies passed review.