Hypothetically, if my friend wanted to move from being a CISO at a large company to a consultant, what is the best way to go about it?