The EU AI Act: What do CISOs need to know to strengthen AI security?