The chief information security officer (CISO) has developed an information security strategy, but is struggling to obtain senior management commitment for funds...