An information security manager has identified that security risks are not being treated in a timely manner. Which of the following is the BEST way to address t...