## 1 Introduction  
Cybersecurity has become a paramount concern for organizations across all sectors. However, small and medium-sized enterprises (SMEs) continue to face disproportionate challenges due to constrained resources, limited expertise, and low cybersecurity awareness. As businesses embrace digital transformation, safeguarding digital assets becomes increasingly vital. In this context, the evolution from Industry 4.0 to Industry 5.0 has significant implications for cybersecurity readiness, particularly within the SME sector [1].  
Industry 4.0 emphasized automation, interconnectivity, and real-time data exchange through technologies such as cyber-physical systems, IoT, and cloud computing. While this industrial revolution improved efficiency and productivity, it also introduced new vulnerabilities by expanding the attack surface. Industry 5.0, in contrast, builds upon these foundations by integrating human-centric approaches with advanced technologies--such as artificial intelligence (AI), blockchain, and robotics--to promote resilience, sustainability, and collaboration between humans and intelligent systems. This shift underscores a more ethical, personalized, and adaptive technological environment that can support more secure digital infrastructures.  
For SMEs, adopting Industry 5.0 represents an opportunity to drive innovation, improve agility, and enhance cybersecurity resilience. However, the integration of such advanced technologies also introduces several barriers, including financial constraints, a lack of technical know-how, and challenges in implementation. Overcoming these issues requires a strategic investment in digital literacy, partnerships with technology providers, and the development of scalable and tailored cybersecurity frameworks [2].  
Despite these potential benefits, SMEs remain highly vulnerable to cyber threats due to limited cybersecurity capabilities. While large corporations have access to comprehensive cybersecurity resources, SMEs often lack the necessary defenses to prevent, detect, and respond to cyberattacks. This vulnerability is highlighted in [PERSON]'s (2023) study, which identifies significant gaps in cybersecurity knowledge and practices among SMEs [3]. The study calls for targeted, industry-specific interventions to mitigate these risks, emphasizing the need for customized awareness programs and human-centered security measures.  
Building upon this foundation, the present study introduces the enhanced ROHAN model, a comprehensive cybersecurity framework tailored to SMEs. This model focuses on customized cybersecurity education based on industry type, employee roles, and educational backgrounds. It is further refined to integrate with the Cyber Guardian Framework (CGF), enhancing resilience through AI-powered risk assessments, automation, and cybersecurity standardization.  
The primary objectives of this study are as follows:  
* Conduct a comprehensive assessment of cybersecurity knowledge and awareness within the SME sector through a systematic literature review.
* Evaluate the impact and effectiveness of cybersecurity awareness programs on SME cybersecurity behaviors and risk mitigation.
* Identify core barriers--financial, technical, and organizational--that hinder effective cybersecurity adoption in SMEs.
* Introduce and validate the enhanced ROHAN model and its integration with the CGF to provide a scalable roadmap for cybersecurity resilience.  
By aligning with Industry 5.0 principles and utilizing a mixed-methods approach--including surveys, interviews, and advanced data analytics--this research contributes evidence-based insights and actionable strategies to close critical cybersecurity knowledge gaps and enhance SME readiness in an increasingly digital landscape.