How leading security and privacy executives maximize their time to secure patient data