Senior management has requested a budget cut for the information security program in the coming fiscal year. Which of the following should be the information se...