Regardless of size, location or industry, most organizations now realize that when it comes to cyber attacks, the question is not whether you will be affected, but when. No one should be exempt from this.
But whether you have the time, the resources or (frankly) the motivation to deal effectively with the current threat and the security landscape - that's a completely different story. You also face other challenges that should not be underestimated. Based on these, you should choose an effective and sustainable solution that meets your own requirements.
A document on this subject is available in German. Would you like to read it? Switch to the German view.