What Security Leaders Can Learn from Marketing