There is a lack of investment in cyber security training in the UK