An information security manager learns that IT personnel are not adhering to the information security policy because it creates process inefficiencies. What sho...