This is a dedicated watch page for a single video.
A government agency is seeking authorization for a new information system. The system contains highly sensitive information and is critical to the agency's mission. A security controls assessment has completed and has identified several vulnerabilities that need to be addressed. The system owner is resistant to implementing the recommended controls due to budget constraints and the potential impact on system performance. What should the authorization team do in this situation?