How to strengthen incident response in the health sector