Bridging the Gap Between Cybersecurity and Rail Operations: Lessons from Rail Companies in Europe