Write a paper on “Recommend and expound upon a course of action in support of Information Security & Risk Management.”