Preventing cyberattacks may seem like a daunting task — a single company against myriad daily faceless threats aiming to breach and penetrate their networks. This is a situation, it turns out, that many are not equipped to handle: According to the Vistage CEO confidence index, in the first quarter of 2016, 41 percent of small and mid-sized businesses said they were not prepared for a cyberattack.

But while protecting against attacks requires a comprehensive set of technology, training and attitudes, it can also be just as easy as fixing a few lines of code. An investigation in early 2016 by F-Secure, for example, found thousands of unpatched vulnerabilities in companies’ networks that leave network infrastructure open to exploitation.