This is a dedicated watch page for a single video.
An Information Security Manager discovers that the organization lacks a structured approach to addressing information security issues. What would be the most effective INITIAL step towards remedying this?