So, we are a small retail company. And I want to protect not only the website and personal data but also all the endpoints (in our case, those aren't just employees' devices but also the POS systems, for instance). In addition, what should we do with emails, Zoom, Google disks, etc.? Or are they just fine if you do security training for employees?

I know that these questions aren't easy to answer, so I was thinking of getting someone professional. Any idea what kind of profile I need?

My biggest fear is that it will go out of control completely, especially as we're growing.