Which of the following is the MOST effective way for an organization to help ensure agreed-upon action plans from an IS audit will be implemented?