How to avoid cybersecurity tool sprawl and resource waste