What do you prioritise during team cyber attack simulations?