Cyber-hygiene is crucial, but employees at small businesses are having a hard time changing their old habits. Why?