expose PMP on internet?

Hi,

We have recently purchased and installed PMP Premium for our bussiness, it's a small company in terms of employees and only about 10-12 users will be using the tool. We had an open discussion about how risky is to expose the web access (also the mobile app) on the internet, both HA nodes are running in our Datacenter, where most of the production machines are. So what's your opinion about this issue? Is it a terrible idea? are there any best practices apart from standard network securization? Note that regarding the network, we can not filter by IP, so the portal would be open to the world.

Thanks in advance and best regards,