For some industries, it's critical their employees are not spied upon. The CISO should prioritize this for those companies.

Banks, Defense, etc.