Which of the following is an information security manager's BEST course of action upon discovering an organization with budget constraints lacks several importa...