What Works in SOC/NOC Integration: Improving Time to Detect, Respond and Contain