How to put cybersecurity sustainability into practice