3 CIO lessons for maximizing cybersecurity investments