Andrew Rae, Asma Patel: Defining a New Composite Cybersecurity Rating Scheme for SMEs in the U.K. ISPEC 2019: 362-380