For all the time, money, and energy spent crafting campaigns for CISOs, the real decision-making often occurs elsewhere—within the technical teams or lieutenants tasked with evaluating and implementing solutions.