This appears to be a small-to-mid-sized technology business. Organisations in this space typically handle sensitive client data and credentials — making them a common target for phishing and credential theft. Without strong email authentication and endpoint controls, a single compromised account can expose your entire client base.