After an initial risk assessment, the project manager realizes it is very likely that the controls will not be implemented within 30 days, and the costs of impl...