A common challenge in security operations is a lack of resources, including budget, personnel, and tools. Therefore, option a is the correct answer.