A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action...