Which of the following would be an indicator of the effectiveness of a computer security incident response team?