CBR: Give CISOs a Say – The Cyber Security Paradox