Managing change in cybersecurity: navigating transition between standard versions and compliance with legislation: A case study