You have been the Information Security Manager at ABC Manufacturing for six months and have discovered the company is not employing any countermeasures to combat risk. Post your internal email to the CISO stating the countermeasures you will impose (at least one not listed in this week's textbook chapters) to mitigate risks to your company's network.

Respond to the initial post from the viewpoint of the CISO, how does the proposed countermeasure reduce risk?