If your exposed services use authentication and you use strong passwords you are no worse off than any small business but you have the advantage of being a lesser target.