Adaptable security maturity assessment and standardization for digital SMEs