Unlocking insights from real-world cyber security case studies what can we learn