CISO Strategy vs Bureaucracy: How to Navigate Leadership Challenges