Shirley...?
Surely any organization that takes security seriously will have already done most of the donkey work already and the only rushed aspect will be to convene the board and put the relevant information in front of them for them to approve.
Won't they??