You are an information system auditor of HDA Inc. You are auditing the company's information system usage. Upon noticing that several employees are spending an excessive amount of time using social media sites for personal reasons, what is the first action you should recommend in response to this observation?