3 questions every CIO must answer