Cybercrime and the risks associated with it are no longer the domain of big business only. As auditors, we see an increasing risk for small and medium-sized businesses (SMEs) and Not-For Profit (NFP) organisations throughout New Zealand. This dark and sinister turn of events shows us that having a clear cybersecurity plan in place is vital to protect the revenue, cashflow and digital assets for SMEs and NFPs.