Determine the logging and auditing deficiencies of the current environment. Then, create official policies for the following: Logging (Think about what you want to capture and whether it is obtainable; if it is not obtainable, what can be done to make it obtainable?) Auditing (Who will be auditing the logs and what procedures will they need to complete?)