A CISO's Guide to Balancing Network Security Risks