what cyber security protocols are SMEs deploying to ensure cyber readiness?

what type of cyber security protocols exist within your company? (e.g. technological protocols, education and training)

Is cyber security left solely to the IT department?