Difficult security incidents are unique and valuable opportunities. They are the sort of testing you can’t buy: real-world, un-simulated, and direct. They are priceless jewels, but only if you use them for all they’re worth.

https://www.f5.com/labs/articles/cisotociso/making-the-most-of-a-security-incident