The state of the chief information security officer role