The interdependency of people, policy and products amid a cybersecurity talent shortage