You are the Information Security Manager of HDA Inc. After an external security audit reveals multiple instances of control noncompliance, you are tasked with communicating the most crucial information to senior management. You are the Information Security Manager of HDA Inc. What is the MOST crucial information for you to convey to senior management after an external security audit identifies numerous instances of control noncompliance?