TPRM, ESG, and Risk Quantification - What CISOs Need to Know