What are your security non-negotiables?

With the recent Canvas ransomeware attack and articles such as https://programs.com/resources/small-business-ransomware-stats/, you can only think of all the security features these companies and managment said were "just too expensive". What are your non-negotiables that your company does (or shoul