A third-party audit of an organization's network security has identified several critical risks. Which of the following should the information security manager...