The Illusion of Due Diligence: Notes from the CISO Underground