Cibersecurity: from paper to action