You need to manage the roles and responsibilities for security and financial management to address concerns found in the prior year's audit. What should you do?