Cyber security should come first, especially if you are dealing with finances and confidential information. In addition, now very often cyberattacks are carried out on various enterprises, companies, even on government structures. Therefore, on cybersecurity issues, you can consult with the guys from this company https://underdefense.com/ . They deal with these issues and will tell you what to do.
The answer is yes, you should invest in your company's cyber defense. But this doesn't mean that you need to spend a lot of money on it or hire a large number of employees. The most important thing is that you have a plan in place so that everyone is aware of what they should do in case of an attack. Visit https://masterbundles.com/black-friday-and-cyber-monday-banners-and-promos/ for more details about investing in cyber defence. This can be as simple as informing everyone about how to stay safe online, but it also needs to include steps like updating software and applying patches to make sure your systems are protected against any possible vulnerabilities.