A conversation with Greg Touhill, former federal CISO