Proofpoint Security Awareness Training discussions

with so many tools out there, is it really necessary for small businesses to invest in security awareness training for their teams? how much risk are we really facing?