CISO role grows in stature, but challenges remain