When weaknesses are discovered, the business managers are expected to either improve compliance with existing policies or consult with the corporation's security experts regarding the feasibility of implementing new policies or control techniques.
Business managers are expected to either improve compliance with the policies already in place or implement new policies.