Text this: Criteria and indicators for assessing the quality of the investigation of an information security incident as part of a targeted cyberattack