Cyber companies need a best practice approach to major incidents.