You can't improve the effectiveness of your cybersecurity team if you don't know which skills they lack.