Conducting simulated threat exercises (STEs) to further improve cybersecurity program