What cybersecurity services do small companies need?

What services does a small/medium company need in terms of cybersecurity?

In your opinion, what "packages" can a cybersecurity company offer to small/medium bussines?

I was thinking about phishing training and phishing simulations. What else? Maybe OSINT?

How much would you charge for these services?

charge companies cybersecurity cybersecurity company cybersecurity services medium offer opinion osint packages phishing phishing training services simulations terms thinking training