One in three NZ small businesses was hit by a cyber attack in the last six months. Most already had the right tools. The gap wasn't knowledge — it was that nobody was watching.