CISO Strategy: The One Piece of Advice That Matters