## 5 Discussion  
The study found that while there was a general awareness of cyber threats among SMEs in Wales, the depth of understanding varied significantly. Many SMEs were aware of the existence of threats such as phishing and malware but lacked detailed knowledge about how these threats operated and how they defended against them effectively. This superficial awareness led to a false sense of security. [PERSON]'s (2023) research [3]  
Figure 16: ML Usage by Industry. Figure 17: ML awareness by Age and Industry. points a nuanced picture of cybersecurity awareness programs for SMEs. While not a silver bullet, the study found these programs to have a positive impact. SMEs that participated in structured training programs exhibited a demonstrably deeper understanding of core cybersecurity principles, according to the literature. This translates to a higher likelihood of implementing essential security measures, such as strong password management practices and regular software updates. However, the effectiveness of these programs was hampered by two key limitations. Their outreach was demonstrably limited. Many SMEs simply did not have access to such training. This could have been due to several factors, including resource constraints, where the cost of training programs was a significant barrier for SMEs with tight budgets. There was also a lack of awareness where some SME owners may not have been aware of the available cybersecurity training programs or their importance. There was a sustainability of knowledge whereby the effectiveness of stand-alone training programs may diminish over time. Without ongoing reinforcement or refresher courses, the knowledge gained from initial training could fade, potentially reducing the long-term impact on cybersecurity posture. These limitations highlighted the need for a multifaceted approach to cybersecurity awareness in SMEs. While structured training programs offer a valuable foundation, additional strategies are necessary to ensure a more comprehensive and sustainable level of awareness. While the landscape of cybersecurity resources is flourishing, [PERSON]'s (2023) research [3] exposes a critical gap between availability and implementation for SMEs. Several formidable challenges continue to impede effective cyber defense within these organizations. Again, introducing the same concepts shows the need for repetitive guidance within the SME landscape. Figure 18 explores the multi-pronged approach for SMEs to digest their digital transformation. The approach starts with Resource Constraints, where many SMEs operate on a tightrope, their budgets leaving little room for investment in cutting-edge security solutions or dedicated IT personnel with the specialized expertise to manage them. This lack of in-house expertise further weakens their defenses. SMEs may struggle to identify and patch vulnerabilities due to a deficit of cybersecurity knowledge among their existing workforce. There is also the notion of \"Misplaced Priorities\", where there is a compounding problem of the perception among some SME owners that cybersecurity is a distant threat, not a critical business concern. This perception often stems from a lack of firsthand experience with major cyberattacks. This misplaced sense of security can lead them to prioritize other areas of investment, downplaying the very real risks posed by cyber threats. \"Complexity as a Deterrent\" is the perceived complexity of implementing cybersecurity measures that can be a significant deterrent. The technical jargon of cybersecurity protocols can discourage SMEs from taking the necessary steps to safeguard their businesses. Interestingly, the field of cybersecurity is increasingly turning to AI and ML as a potential solution to these challenges faced by SMEs. However, implementing ML for cybersecurity presents its own set of hurdles. The knowledge gap exists whereby some companies, especially SMEs, lack a basic understanding of ML and its applications in cybersecurity. They often rely on outsourcing their IT security needs to experts.