Security leaders in small and medium-sized enterprises are overwhelmed by the volume and complexity of security demands.