A recent regulatory examination identified serious deficiencies in the AML program.Which action should the organization take first?