A new information security manager finds that the organization tends to use short-term solutions to address problems. Resource allocation and spending are not e...