3% of CISOs attribute their raise to taking on larger scope, while others see it reflected in merit increases.