Lessons Learned: Critical Information Infrastructure Protection: How to protect critical information infrastructure