Hiring a CISO-as-a-Service? Ask These 8 Questions