The ultimate security validation checklist for CISOs