The CISO’s role, and the cultural and strategic mindset that influences it, must change.