DETERMINING THE MAIN CAUSES THAT LEAD TO CYBERSECURITY RISKS IN SMES