Observational research is not the best approach to capture customer needs. Needs should be defined based on desired outcomes, not solutions.
Ignoring the risk of cyber attack can put 60% of small and medium-sized businesses out of business, and it is highly likely that you will encounter this risk.