Watch this video on YouTube
What is the MOST appropriate action for an information security manager to take upon learning that the implementation of certain security controls is facing delays due to budget constraints?