Musings of a CISO