https://www.pivotpointsecurity.com/vciso-roadmap-tips/