> many of their systems were running out of date EOL software, to the point of being a security liability

This is more likely a management problem rather than a staffing problem. Lower level management knows about these kind of things but often they are not incentivized to make them a priority due to a culture focused on growth and “winning”.