InfoSec teams fight dual battle: Limited visibility and board communication