Only 35,000 CISOs worldwide serve around 359 million businesses. A new report warns of a massive structural imbalance that leaves small and mid-sized companies dangerously unprotected.