How CISOs and their peers can better engage with boards to get long-term buy-in for strategic initiatives