Understanding defensive practices in business and law: a Dutch case study