Your team has been asked by the CIO to help prepare the board of directors for new levels of security costs and risks for the next five years. The board of directors requested a presentation that will provide the current state of IT security, including identification of risks, current practices, and a clear explanation of the proposed budget increases in this functional area.