Should You Automate Your Security Incident Reporting?