Cyber War Can Only be Won if the CISOs Start Thinking Like an Attacker