In the context of CTO certification, what is the most important consideration when implementing cybersecurity strategy & governance?