Which of the following changes would be reflected in an organization’s risk profile after the failure of a critical patch implementation?