Insights from an external incident response team: Strategies to reduce the impact of cybersecurity attacks