lessons learned from cybersecurity