CISO as Commander: The Path from Strategy to Action.