Three Cybersecurity Practices that CISOs Need to Adapt in 2022