Skip the password poster. Here’s what the data says small businesses should actually do this Cybersecurity Awareness Month, and why most are missing the one thing that matters most.