Gravar-mail: Understanding information security culture: a survey in small and medium sized enterprises