Recent high-profile cyber attacks and breaches have proven that cyber incidents can have significant operational, legal, financial and "brand reputation" impacts. Costs may include fines, penalties, forensic investigations, public relations campaigns, legal fees, and new technology.
The reality for every company, large or small, is that the bad guys are out to get you. And, statistics show that it is just a matter of time before your organization gets hit with the latest business crippling crypto locker virus or bank account emptying phishing scam.
In other words, it isn't a question "if I am attacked"; rather, it is a question of "when will I be attacked?"
As such, cybersecurity needs to be integrated throughout your company as part of an organization wide governance process for risk management.