How Business Analysts Can Assist the CSO in Setting Up Cybersecurity: A Practical Case Study