Taking a thoughtful and collaborative approach to security planning can pay dividends for any organization. As you work in different organizations and with different programs, you$$ll learn how important it is to work with key stakeholders in a coordinated and unified manner to achieve objective security goals.

A big city $($with a population of several million people$)$ has tried to install and maintain up$-$to$-$date IT systems, but at this point, agencies and departments, acting independently over the past decade, have created a haphazard inter$-$connected range of software and hardware that no one really fully understands any more $($and there is no chance of anyone finding an instruction manual if something has to be replaced$).$ Each department spends what it can, when it can, on what its IT staff says it should buy. Each department is responsible for installing software patches supplied by the vendors they use.

You are the new cybersecurity expert $($the first one$)$ hired by the city manager. What is your approach going to be to this haphazard inter$-$connected pattern of IT and information management hardware and software?