Small firms 'shun' PC security