To prevent overspending in the wrong areas of cybersecurity and support ROI, here are five mistakes CISOs should avoid.