Systematically Applying Gamification to Cyber Security Awareness Trainings