With limited resources, I would prioritize securing the most critical assets and focus on a layered security approach. Implementing strong passwords, firewalls, regular software updates, and employee security awareness training are cost-effective measures that provide significant protection.