Why CISOs are consolidating their vendors and improving cloud security