Cybersecurity should be a core business control, not a bolt-on, with majority of attacks on SMEs and accountancy firms starting with something as basic as a compromised email login, warns Jonathan Barber, executive director – UK at the Institute of Financial Accountants