Optimising Human Hours – Best Practice for Proactive Cyber Incident Management