Which of the following should the organization implement?