An empirical study on the use of the Generic Security Template for structuring the lessons from information security incidents | IEEE Conference Publication | IEEE Xplore