Reconciling data protection and cybersecurity: An operational approach for business sector