Cybersecurity norms for nation-states and the global ICT industry