Cyber security should be a core part of any managed IT service. Ask what measures are in place to protect your business, including firewall management, endpoint protection, multi factor authentication, backup monitoring and security updates.
You should also ask whether regular security reviews and user training are available.