You work for a small agency with a total number 22 workers but this agency does not have a Chief Information Officer or any real protocols regarding computer use, information management or information auditing. Recently, the Office Manager orders computers and technology devices when requests are made, subject to approval by the Director. The agency has one Computer Technician who is responsible for the entire network.Your Director has asked you to write a memo outlining your recommendations on whether your agency needs additional IT controls and what types she should consider, if any at all.

Write a memo to fully explain to the Director addressing her question. Argue what makes sense.