How can an organization save its CISO? It starts with four key strategies.