A Reference Model and a Dedicated Method in Support of Cyber-Security by Design: Reality Check