Chief information security officers (CISOs) can help the C-suite and their organization understand the importance of quantifying cybersecurity risk.