Does your business or technology users ever ask you for cyber requirements? What does cybersecurity actually want us to do? Want to not get hacked or fined but

Does your business or technology users ever ask you for cyber requirements? What does cybersecurity actually want us to do? Want to not get hacked or fined but don't have the budget to scale your team? Here is a baseline set of global best practice cyber security requirements