What IT security least should your organization meet?

If you’re a small business owner or manager of a bigger company, you’re constantly bombarded with totally different demands or recommendations regarding what your business should or shouldn’t do. Like accounting system, attendance system or whole security system for monitoring cyber threats. However is this really necessary?