Understanding the Strategy of a Virtual CISO