The threat landscape has changed with cybercrime now exceeding organised crime in terms of revenue. Your data has value, whether you are locked out with a Ransomware attack or having data stolen the results will be the same. Lost Revenue, reputation and a potential fine from the Information Commissioners Office.
Aside from the Malicious hackers and hacktivists looking to steal or lock your data, how much is your intellectual property worth? Would your sales strategies and customer list be useful to a competitor? It only takes one compromised password to allow access to your systems.