Optimizing the Security Researcher and CSO Relationship