What cybersecurity teams can learn from COVID-19