CISO to CISO: How to Be Security First