What should you recommend?
What should you include in the solution?
which group should you recommend the security team members be assigned?