Lessons from CareWell: Strengthening Cybersecurity Governance