The road to becoming a cybersecurity SME, if that’s even possible.