The CISO’s Guide to MITRE ATT&CK