A Chief Information Security Officer receives the following findings from a third-party risk assessment report: Finding #1: Absence of a risk management process...