Why CISOs need zero trust as a ransomware shield