One of main cyber-risks is to think they don't exist. The other is to try and treat all potential risks. Fix the basics, protect first what matters for your business and be ready to react properly to pertinent threats.