CSO Security Investment Prioritization