These two areas are CISOs’ top priorities this year