SBA's CISO shares agency is using new framework and shared threat intelligence to move beyond reactive nature of cybersecurity.