A report by Sophos highlighted that a shortage of cybersecurity expertise in SMBs is now considered the second top cybersecurity challenge, following zero-day threats. This shortage not only hampers ongoing learning and monitoring of threats but also contributes to longer periods of unmonitored threats, increasing vulnerabilities. The skills gap in smaller businesses leads to difficulties in investigating suspicious alerts, escalating the risk of attacks going unnoticed

 Skills shortages are a top-two security risk for SMBs

Additionally, the report pointed out that burnout among IT and security professionals due to stretched teams further exacerbates the security risks, with teams being more susceptible to attacks. SMBs need to tackle this cybersecurity skills shortage and burnout crisis to enhance their resilience against cyber threats, as highlighted by Sophos' field CTO, Aaron Bugal.
https://www.infosecurity-magazine.com/news/skills-shortages-toptwo-security/