A cybersecurity practitioner's methodology