cism video for an external audit has identified several non-compliant practices in your organization's data handling processes. As a result, you are developing
An external audit has identified several non-compliant practices in your organization's data handling processes. As a result, you are developing a corrective action plan. What should be the FIRST step in this plan?