Q17
Single choice
Which of the following is an information security manager's BEST course of action to gain approval for investment in a technical control?