From: Improving the exchange of lessons learned in security incident reports: case studies in the privacy of electronic patient records
