Towards Better Management Of Organizational Cybersecurity