CISO Year End Review Part 2