https://www.pivotpointsecurity.com/there-are-2-kinds-of-cisos-which-kind-does-your-business-need/