The Value of Soft Cybersecurity Practices