Tips for CISOs to mitigate their cyber risk