Everyone would like to have the most sophisticated defence possible. But this is not always possible or necessary. Because increasing your means of defence has a cost: financial, human, etc.

To avoid ruin and make the most of the resources available, a good lord in the Middle Ages would evaluate the security costs and risks of the income and expenditure for his castle. 

It's the same thing in your business: evaluate the costs and risks so that your cybersecurity is not too expensive. Certain types of protection may be more of a priority than others, depending on your personal situation, and you don't necessarily need the latest cutting-edge product.

Do you think you have done what is necessary? Why not make sure by organising a regular internal and/or external security audit? This will allow you to continue improving (virtuous circle) and to identify risks you may not have considered, whilst also taking account of your needs and resources.

The most important fact is not the price, but the efficiency of your cyber defence system !