Best Practices for Working with a vCISO