Who within an organization should a security firm select to pitch their product? Should they go to the top of the food chain, or start partway down?

Source: https://www.forbes.com/sites/davidspark/2018/02/01/the-cisosecurity-vendor-relationship-should-you-market-to-the-cisos-direct-reports/