https://www.pivotpointsecurity.com/do-we-need-a-virtual-ciso/