A lack of talent, resources and budget are preventing companies from being able to handle cyberattacks.