100% reach out to a local IT service provider for a security risk assessment. In my experience, most small businesses have built their network ad-hoc over many years either on their own or by using a variety of IT service providers. It can lead to major gaps in your security posture that will be identified by a quality security assessment!