Security professionals want leaders who have already led their organization through a major cyber incident – regardless of how things turned out