Which of the following tools should the organization implement to reduce the highest risk identified in this log?