Small business owners should be sure to fix these three non-technical risks that require little cybersecurity expertise.