Internal audit has reported a number of information security issues that are not in compliance with regulatory requirements. What should the information securit...