Innovation without exposure: A CISO’s secure-by-design framework for business outcomes