In many intances, there simply isn't a better single thing that a company can do for security. Without it, a slip of the tongue or an accomplished social engineer can mean disaster!
An architecture that is both resilient to attack and recoverable during and after can sometimes mean the difference between staying in business to fight another day- or not!
When you set things up for security, great job! Now, keeping it in great shape sometimes becomes "Mission Impossible".
Often a small business doesn't know where to start, but through experience, we know that these are commonly found to offer the highest amount of increased security posture, at the lowest cost for implementation.