Q33
Single choice
An information security manager has become aware that system administrators are not changing server administrator accounts from the default usernames. A policy has been created and approved by business managers to require these changes.
Which of the following should be the information security manager's FIRST course of action?