## 2 Literature Review
(2023) [12] discuss the role of government in fostering cybersecurity awareness within SMEs, highlighting the potential for multi-stakeholder approaches. Existing research focuses on developing training programs tailored to the needs of non-technical staff in SMEs, emphasizing clear communication, building a cybersecurity culture, and conducting needs assessments. In contrast, [PERSON] et al. (2023) [3] proposed the ROHAN model, which goes beyond training by outlining a comprehensive process for building cybersecurity resilience in organizations. This model incorporates risk assessment, ownership by staff at all levels, a holistic view of cybersecurity, and continuous improvement through nurturing a cybersecurity culture. An improved ROHAN model could prove even more beneficial by incorporating elements from the reviewed studies. For instance, integrating needs assessments from [PERSON] et al. (2023) [12] could ensure training aligns with the specific vulnerabilities of an SME. Furthermore, adopting clear communication strategies could enhance staff understanding and ownership within the ROHAN framework. By combining these elements, the ROHAN model has the potential to be a highly effective approach for building a robust cybersecurity posture within SMEs. SMEs will continue to face unique challenges in ensuring cybersecurity due to limited resources and technical expertise. This necessitates tailored training programs for non-technical staff, emphasizing clear communication and fostering a culture of security. Several of these studies highlight the importance of needs assessments in designing effective training programs for SMEs [12]. This aligns with the concept of a heuristic approach, which emphasizes practical methods for problem-solving based on experience and trial and error. By conducting needs assessments, training programs can be tailored to address the specific vulnerabilities faced by individual SMEs, maximizing the effectiveness of training initiatives [12]. Beyond training, fostering a strong cybersecurity culture within the organization is crucial. Research by [PERSON], [PERSON], et al. (2020) emphasizes the importance of ongoing awareness campaigns and employee engagement in building a culture of security [13]. This aligns with the multi-stakeholder approach, which highlights the role of government and industry collaboration in fostering cybersecurity awareness within SMEs. Collaborative efforts can promote information sharing and resource exchange, further enhancing overall cyber resilience. The research also acknowledges the limitations of solely focusing on internal training within SMEs. [PERSON] et al. (2023) [12] examine the role of government initiatives in promoting cybersecurity awareness among SMEs. Government-sponsored training programs, resource sharing, and financial assistance can provide valuable support for SMEs in bolstering their cyber defenses. In conclusion, effectively addressing cybersecurity training for non-technical employees in SMEs requires a multi-faceted approach. Academic research highlights the importance of clear communication, fostering a cybersecurity culture, and tailoring training programs to address specific SMEs. Furthermore, collaborative efforts involving government, industry, and SMEs themselves can strengthen overall cyber resilience. By implementing a combination of these strategies, SMEs can empower their non-technical workforce to play a crucial role in safeguarding the organization from cyber threats. Academic research consistently emphasizes the need for accessible and tailored cybersecurity training programs for SMEs. To address this critical need, several companies offer online training platforms specifically designed for businesses, with features catering directly to the resource constraints and unique requirements of SMEs. These online platforms often incorporate modular course structures, allowing SMEs to select training modules that directly address their identified vulnerabilities and training needs.