If not enough personnel are available to analyse logged data, security-relevant events may not be detected completely. As a consequence, attacks may remain unnoticed for extended periods of time or only be detected after a large amount of sensitive information has been compromised. If external sources of information are not evaluated due to a lack of sufficient staff, vulnerabilities may remain open for too long. They may then be exploited by attackers to gain unauthorised access to an organisation's IT systems.